May 14, 2019—KB4499158 (Security-only update)

May 14, 2019—KB4499158 Security-only update Applies To Windows Server 2012 Windows Embedded 8 Standard Improvements and fixes This security update includes quality improvements. Key changes include: Provides protections against a new subclass of speculative execution side-channel vulnerabilities,...

May 14, 2019—KB4499149 (Monthly Rollup)

May 14, 2019—KB4499149 Monthly Rollup Applies To Windows Server 2008 Service Pack 2 Note Customers who have applied KB4489887 or later Monthly Rollup Packages to Microsoft Server 2008 SP2 may notice a change to the operating system version string. The “build number” component of the version strin...

May 14, 2019—KB4499180 (Security-only update)

May 14, 2019—KB4499180 Security-only update Applies To Windows Server 2008 Service Pack 2 Windows Vista Notice This security update can be installed on Windows Server 2008 Service Pack 2 and on Windows Vista. Improvements and fixes This security update includes quality improvements. Key changes...

Siemens CP 1604 Communications Adapter Detection

Binary data 762016.prm...

Siemens CP 1604 Communications Adapter Detection

Binary data 762017.prm...

SAP Gateway Remote Command Execution

Added: 05/07/2019 Background SAP Gateway is a development framework, which allows non-SAP applications to communicate with SAP applications. Problem SAP Gateway behavior depends on two parameters, aclmode and simmode. If SAP Gateway access control lists ACLs are configured aclmode=0, anonymous...

Fedora Update for qt5-qtwebengine FEDORA-2018-02ba093706

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SAP Gateway Remote Command Execution

Added: 05/07/2019 Background SAP Gateway is a development framework, which allows non-SAP applications to communicate with SAP applications. Problem SAP Gateway behavior depends on two parameters, aclmode and simmode. If SAP Gateway access control lists ACLs are configured aclmode=0, anonymous...

SAP Gateway Remote Command Execution

Added: 05/07/2019 Background SAP Gateway is a development framework, which allows non-SAP applications to communicate with SAP applications. Problem SAP Gateway behavior depends on two parameters, aclmode and simmode. If SAP Gateway access control lists ACLs are configured aclmode=0, anonymous...

Security Management Center Info Disclosure

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite antivirus tool is related to deficiencies in the document export mechanism. Exploiting this vulnerability allows a malicious actor to obtain information about the installed components of the...

Security Management Center Info Disclosure

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite antivirus tool is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain information about the installed...

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. Multiple errors were discovered in the way the JAXP and Security components processes XML inputs. A remote attacker could create a crafted XML that would cause a Java application to use an excessive amount of CPU and memory when processed...

Oracle WebLogic Server Data Modification

The vulnerability of Oracle WebLogic Server’s application server’s WLS core components is related to lack of access control mechanisms. Exploiting this vulnerability allows an attacker to remotely modify, add, or delete data using the HTTP protocol...

Code injection

Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building. A remote unauthenticated malicious attacker could hijack the DNS entry for the dependency, and inject malicious code into the component...

'Highly Critical' Unpatched Zero-Day Flaw Discovered In Oracle WebLogic

A team of cybersecurity researchers today published a post warning enterprises of an unpatched, highly critical zero-day vulnerability in Oracle WebLogic server application that some attackers might have already started exploiting in the wild. Oracle WebLogic is a scalable, Java-based multi-tier...

CVE-2019-2615

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2645

CVE-2019-2645 affects Oracle WebLogic Server (WLS Core Components). Affected versions are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. The underlying issue allows an unauthenticated attacker with network access via T3 to compromise WebLogic Server, potentially taking over the server. CVSS v3.0 base sco...

CVE-2019-2615

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2618

CVE-2019-2618 affects Oracle WebLogic Server (WLS Core Components) in Oracle Fusion Middleware. Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. The issue is a directory traversal/file-upload flaw that can permit a high-privileged, unauthenticated or authenticated attacker over HTTP to writ...

CVE-2019-2568

CVE-2019-2568 affects Oracle WebLogic Server (WLS Core Components) and is applicable to WebLogic versions 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. The issue is a network-accessible vulnerability that allows a low-privilege, unauthenticated or low-privilege attacker with HTTP access to compromise th...