15877 matches found
CVE-2018-2738
CVE-2018-2738 affects Oracle Retail Central Office (Security subcomponent) within Oracle Retail Applications. Connected sources confirm affected versions: 13.4.9, 14.0.4, and 14.1.3. The vulnerability is exploitable over HTTP with network access and unauthenticated, enabling an attacker to author...
CVE-2018-2876
CVE-2018-2876 affects Oracle Retail Integration Bus (RIB Kernel) in Oracle Retail Applications, version 13.2. The flaw lies in the RIB Kernel (Apache Commons Collections) subcomponent, enabling an unauthenticated network attacker to access Oracle RIB data and potentially perform unauthorized upda...
CVE-2018-2852
Oracle Hospitality Applications – Hospitality Guest Access component (Base), affected in versions 4.2.0 and 4.2.1, contains a vulnerability that allows a low-privileged, network-accessible attacker over HTTP to read and modify data, potentially leading to unauthorized update/insert/delete and rea...
Securing Cloud-Native Applications
A conversation with Randy Bias Last week we were able to sit down with Randy Bias — a cloud pioneer and a technology visionary who currently oversees Juniper Networks cloud strategy. We have asked Randy to share his thoughts on the security of private and public clouds and specifically cloud-nati...
MySQL Squid Access Report 2.1.4 - SQL Injection / Cross-Site Scripting Vulnerabilities
Exploit for php platform in category web applications...
CVE-2018-2795
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker wi...
UBUNTU-CVE-2018-2799
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network...
CVE-2018-2799
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network...
CVE-2018-2815
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attack...
PT-2018-15839 · Oracle +2 · Java Se +3
Name of the Vulnerable Software and Affected Versions: Java SE version 10 Description: The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and may...
NordVPN Elevation of Privilege Vulnerability
NordVPN for Windows is a Windows-based VPN software for anonymous access to the Internet. A lifting vulnerability in version 6.12.7.0 of NordVPN for Windows-based platforms stems from a NetNamedPipe endpoint created by the 'nordvpn-service' service that allows arbitrary installed applications to...
Cybercriminals Hijack Router DNS to Distribute Android Banking Trojan
Security researchers have been warning about an ongoing malware campaign hijacking Internet routers to distribute Android banking malware that steals users' sensitive information, login credentials and the secret code for two-factor authentication. In order to trick victims into installing the...
Take a Tour of New Routed Dashboard
As a product manager, there are few things more rewarding than finally putting your product into the hands of your customer for the first time. We've been working on the new Routed Dashboard for some time, and I've personally spoken to many of you in terms of what would make our new interface mor...
Roaming Mantis uses DNS hijacking to infect Android smartphones
In March 2018, Japanese media reported the hijacking of DNS settings on routers located in Japan, redirecting users to malicious IP addresses. The redirection led to the installation of Trojanized applications named facebook.apk and chrome.apk that contained Android Trojan-Banker. According to ou...
Climbing the Ladder: Zero Trust, Single Sign-On, Multiple Applications
It is understood that there is a significant amount of complexity to securing today's enterprise, especially as more services and applications move to the cloud and a Zero Trust security model is employed. We at Akamai are actively engaged in helping enterprises adjust to a Zero Trust security...
Active Directory Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Active Directory incorrectly applies Network Isolation settings. To exploit this vulnerability, an attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could bypass firewall policies appli...
[SECURITY] Fedora 28 Update: nodejs-8.11.0-1.fc28
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...
[SECURITY] Fedora 26 Update: nodejs-6.14.0-1.fc26
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...
Remote Execution Flaw Threatens Apps Built Using Spring Framework — Patch Now
Security researchers have discovered three vulnerabilities in the Spring Development Framework, one of which is a critical remote code execution flaw that could allow remote attackers to execute arbitrary code against applications built with it. Spring Framework is a popular, lightweight and an...
