CVE-2020-14544

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Data, Domain & Function Security. The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Netsweeper Injection Vulnerability

Netsweeper is a Web content filtering solution from Netsweeper Canada. A security vulnerability exists in the /webadmin/tools/unixlogin.php script in Netsweeper versions 6.4.3 and earlier. An attacker could exploit the vulnerability to execute code...

PT-2020-10171 · Grafana +4 · Grafana +4

Name of the Vulnerable Software and Affected Versions: Grafana versions 6.4.3 and earlier Description: The issue allows an authenticated attacker with privileges to modify data source configurations to read arbitrary files. This can be exploited by an attacker who has the necessary permissions to...

Atlassian Bitbucket 6.4.x < 6.4.3 Command Injection Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is prior to 5.16.10, 6.0.x prior to 6.0.10, 6.1.x prior to 6.1.8, 6.2.x prior to 6.2.6, 6.3.x prior to 6.3.5, 6.4.x prior to 6.4.3 or 6.5.x prior to 6.5.2. It is, therefore, affected by a...

CVE-2019-2709

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite subcomponent: Security. Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

Photon OS 2.0: Kibana PHSA-2019-2.0-0132

An update of the kibana package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0132. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12290...

CVE-2019-8986

The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO...

Elastic Stack 6.4.3 and 5.6.13 security update

Elasticsearch information disclosure ESA-2018-16 Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if the same...

CVE-2017-7463

JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. A malformed XML file, if uploaded, causes an error message to appear that includes part of the bad XML code verbatim without filtering out scripts. Successful exploitation would allow execution of...

CVE-2018-2823

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite subcomponent: Database. The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite subcomponent: Database. The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

An updated Red Hat JBoss Enterprise Application Platform 6.4.3 package that fixes a security issue, several bugs and adds various enhancements is now available for Red Hat Enterprise Linux 7. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss...

Moderate: Red Hat Security Advisory: jboss-ec2-eap bug fix security update

An updated jboss-ec2-eap package that that fixes a security issue, fixes several bugs and adds various enhancements is now available for Red Hat JBoss Enterprise Application Platform 6.4.3 on Red Hat Enterprise Linux 6. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java EE...