CVE-2020-14670

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: Settings. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2020-14670

CVE-2020-14670 affects Oracle E-Business Suite, Advanced Outbound Telephony (Settings) for versions 12.1.1–12.1.3 and 12.2.3–12.2.9. The flaw allows an unauthenticated attacker with network access via HTTP to compromise the Telephony component; however, exploitation requires user interaction from...

CVE-2020-14671

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2020-14671

CVE-2020-14671 affects Oracle E-Business Suite Oracle Advanced Outbound Telephony UI, versions 12.1.1–12.1.3. The vulnerability allows unauthenticated network access via HTTP to compromise the Telephony component; exploitation requires human interaction. It can lead to unauthorized read of data a...

Information Disclosure Vulnerability in Multiple Siemens Products

SIMATIC HMI Panels are used for operator control, machine and plant monitoring.SIMATIC WinCC Runtime Advanced is a visual runtime platform, machine and plant monitoring.SIPLUS extreme products are designed to be operable under extreme conditions and are based on Imatic, LOGO! SITOP, SINAMICS,...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2020-44273)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management, etc. Advanced Outbound Telephony is one of the tools used for outbound ca...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2020-44274)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management, etc. Advanced Outbound Telephony is one of the tools used for outbound ca...

Microsoft Intelligent Security Association expands to include managed security service providers

We’d planned a splashy party at Microsoft Inspire to announce our newest Microsoft Intelligent Security Association MISA members and introduce them to association members, but given our world today, I am instead picturing you reading this announcement curled up in a chair with a cup of coffee...

How bad bots are targeting the healthcare sector

Credential cracking, or password spraying, is one of the most effective ways for cybercriminals to get access to user accounts. It refers to the brute-force automated cracking, or pairing of usernames and passwords by using sophisticated high-speed bots. According to a National Cyber Awareness...

[SECURITY] Fedora 31 Update: alpine-2.23-2.fc31

Alpine -- an Alternatively Licensed Program for Internet News & Email -- is a tool for reading, sending, and managing electronic messages. Alpine is the successor to Pine and was developed by Computing & Communications at the University of Washington. Though originally designed for inexperienced...

[SECURITY] Fedora 32 Update: znc-1.8.1-1.fc32

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

[SECURITY] Fedora 31 Update: znc-1.8.1-1.fc31

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

CVE-2020-15308

Support Incident Tracker aka SiT! or SiTracker 3.67 p2 allows post-authentication SQL injection via the siteedit.php typeid or site parameter, the searchincidentsadvanced.php searchtitle parameter, or the reportqbe.php criteriafield parameter...

Spyse: All-In-One Cybersecurity Search Engine

Spyse is a cybersecurity search engine for finding technical information about different internet entities, business data, and vulnerabilities. It’s an all-in-one platform for fast and effortless reconnaissance without using any additional tools. Spyse engine implements a ready-to-use database wi...

McAfee Advanced Threat Defense Information Disclosure Vulnerability (CNVD-2020-52853)

McAfee Advanced Threat Defense ATD is a suite of advanced threat protection systems from the U.S.-based company McAfee McAfee. The system provides zero-day attack protection and malware protection through static code analysis, malware dynamic analysis and machine learning. An information disclosu...

CVE-2020-14990

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...

CVE-2020-14990

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...

Arbitrary file deletion

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...

CVE-2020-14990

CVE-2020-14990 affects IOBit Advanced SystemCare Free 13.5.0.263. Local attackers can gain privileges to delete files by manipulating the Clean & Optimize feature using an NTFS junction and an Object Manager symbolic link. The description explicitly links the vulnerability to local privilege esca...