CVE-2020-2864

CVE-2020-2864 concerns Oracle E-Business Suite’s Oracle iSupplier Portal (Accounts) with vulnerability in affected versions 12.1.3 and 12.2.5–12.2.9. An unauthenticated, network-accessible attacker can exploit HTTP to obtain unauthorized read access to a subset of Oracle iSupplier Portal data. Th...

RHEL 7 : kernel (RHSA-2019:2864)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2864 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A buffer overflow flaw was found in the way Lin...

openSUSE Security Update : virtualbox (openSUSE-2019-1814)

This update for virtualbox to version 6.0.10 fixes the following issues : Security issues fixed : - CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863 CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850...

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2019:1814-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-2864

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2019-2864

Summary (CVE-2019-2864) : A vulnerability in the Oracle VM VirtualBox core subcomponent affects VirtualBox versions earlier than 5.2.32 and 6.0.10 . The flaw enables a high-privilege attacker with local access to compromise Oracle VM VirtualBox, with potential takeover of the VirtualBox instance ...

Insteon 2864-222 Buffer Overflow Vulnerability (CNVD-2018-12053 )

Insteon HD IP Camera White 2864-222 is an IP camera product from Insteon USA. A buffer overflow vulnerability exists in the webService binary in Insteon HD IP Camera White 2864-222. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted pid, pwd, or usr...

Insteon 2864-222 Buffer Overflow Vulnerability

Insteon HD IP Camera White 2864-222 is an IP camera product from Insteon USA. A buffer overflow vulnerability exists in the webService binary in Insteon HD IP Camera White 2864-222. An attacker can exploit this vulnerability to hijack the control flow with the help of a specially crafted usr...

CVE-2018-11560

The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp parameter to cgi-bin/CGIProxy.fcgi on port 34100...

CVE-2018-11560: Out-of-bounds Write

The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp parameter to cgi-bin/CGIProxy.fcgi on port 34100...

CVE-2018-12640: Improper Restriction of Operations within the Bounds of a Memory Buffer

The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100...

PT-2018-11302

Name of the Vulnerable Software and Affected Versions Insteon HD IP Camera White 2864-222 affected versions not specified Description The issue concerns a Buffer Overflow in the webService binary of the affected device. This occurs via a crafted pid, pwd, or usr key in a GET request on port 34100...

PT-2018-10668

Name of the Vulnerable Software and Affected Versions Insteon HD IP Camera White 2864-222 affected versions not specified Description The issue is related to a stack-based Buffer Overflow that leads to Control-Flow Hijacking. This can be achieved via a crafted usr key, as demonstrated by a long...

CVE-2018-2864

CVE-2018-2864 affects Oracle E-Business Suite, specifically the Oracle Application Object Library diagnostics component. Affected versions are 12.1.3 and 12.2.3–12.2.7. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to read a subset of Oracle Application Object ...

Circle with Disney Weak Authentication Vulnerability(CVE-2017-2864)

Summary An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication bypass. An attacker can send a series of...

CVE-2017-2864

An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Specially crafted network packets can cause a valid authentication token to be returned to the attacker resulting in authentication bypass. An attacker can send a series of packets t...

CVE-2017-2864

Circle with Disney devices contain CVE-2017-2864 where the authentication token generation is weak, allowing an attacker to trigger authentication bypass by sending crafted requests. The TALOS reports show the vulnerability chain: a GET parameter appid from the user is incorporated into a token f...

Circle with Disney Backup API Command Injection Vulnerability

Summary An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request trigger this vulnerability. Tested Versions Circle with Disney Product URLs...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2017:2864-1)

This update for xen fixes several issues: These security issues were fixed : - CVE-2017-5526: The ES1370 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host...

CVE-2016-2864

Summary: CVE-2016-2864 is a cross-site scripting (XSS) vulnerability affecting multiple IBM Jazz-based products (CLM, RQM, RTC, RDNG, RELM, Rhapsody DM, RSA DM) with affected versions ranging from CLM 3.0.1.6 to 6.0.x. The root cause is improper validation of user-supplied input, allowing remote ...