6423 matches found
SecFox Security Audit System V5 suffers from Arbitrary File Download Vulnerability
SecFox Security Audit System V5 is a security audit system. SecFox Security Audit System V5 suffers from an arbitrary file download vulnerability. An attacker can exploit the vulnerability to download arbitrary files...
CVE-2018-18438
Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value...
Unspecified Vulnerability in Oracle Retail Applications Retail Sales Audit Component
Oracle Retail Applications is a set of retail applications store solutions of Oracle Corporation Oracle. Retail Sales Audit is one of the audit components. An unspecified vulnerability exists in the Oracle Retail Applications Retail Sales Audit component. An attacker could use this vulnerability ...
CVE-2018-3115
Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications subcomponent: Operational Insights. Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2018-3115
Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications subcomponent: Operational Insights. Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
Buffer overflow
Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications subcomponent: Operational Insights. Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2018-3115
CVE-2018-3115 affects Oracle Retail Sales Audit (Operational Insights) in Oracle Retail Applications, with affected versions 15.0 and 16.0. The vulnerability is exploitable by a low-privilege attacker with network access via HTTP to compromise Oracle Retail Sales Audit, potentially granting unaut...
CVE-2018-3115
Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications subcomponent: Operational Insights. Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2018-3115
Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications subcomponent: Operational Insights. Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2018-21804)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server component of Oracle MySQL, version 5.7.23 and earlier, and the Server: Security: Audit subcompone...
Google to Encrypt Android Cloud Backups With Your Lock Screen Password
In an effort to secure users' data while maintaining privacy, Google has announced a new security measure for Android Backup Service that now encrypts all your backup data stored on its cloud servers in a way that even the company can't read it. Google allows Android users to automatically backup...
AutoRDPwn - The Shadow Attack Framework
AutoRDPwn is a script created in Powershell and designed to automate the Shadow attack on Microsoft Windows computers. This vulnerability allows a remote attacker to view his victim's desktop without his consent, and even control it on request. For its correct operation, it is necessary to comply...
The defect-week session of the fourth term: XML external entity injection-vulnerability warning-the black bar safety net
Code audit is the use of static analysis to discover the source code of the security flaws of the method can aid in the development or testing personnel in a software on-line prior to a more comprehensive understanding of its security concerns, preventive measures, and therefore has always been t...
Sandsifter - The X86 Processor Fuzzer
The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secret processor instructions from every major vendor;...
PTC ThingWorx Password Disclosure / Cross Site Scripting Vulnerabilities
PTC ThingWorx suffers from cross site scripting and password disclosure vulnerabilities. Versions affected include 6.5 through 7.4, 8.0.x, 8.1.x, and 8.2.x. ======================================================================= title: Password disclosure vulnerability & XSS product: PTC ThingWor...
Citrix StorageZones Controller Improper Access Restrictions / Traversal
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Citrix StorageZones Controller vulnerable version: all versions before 5.4.2 fixed version: 5.4.2 CVE number: CVE-2018-16968,...
Security Vulnerability in ESS ExpressVote Touchscreen Voting Computer
Of course the ESS ExpressVote voting computer will have lots of security vulnerabilities. It's a computer, and computers have lots of vulnerabilities. This particular vulnerability is particularly interesting because it's the result of a security mistake in the design process. Someone didn't thin...
Open-AudIT Professional Cross-Site Scripting Vulnerability (CNVD-2018-19866)
Open-AudIT is a network discovery and auditing program. The program intelligently scans networks and network devices and provides status reports. A cross-site scripting vulnerability exists in Orgs Page in Open-AudIT Professional Edition version 2.2.7. A remote attacker can exploit this...