hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

PT-2019-4065 · Intel · Intel Xeon E-2200 +4

Name of the Vulnerable Software and Affected Versions: IntelR CoreTM Processor families versions 6th through 9th IntelR XeonR Processor E3-1500 versions v5 and v6 IntelR XeonR E-2100 and E-2200 Processor families with IntelR Processor Graphics Description: The issue is related to insufficient...

The vulnerability of the Mobile Service sub-component of the BI Publisher (formerly XML Publisher) software platform from Oracle Fusion Middleware allows a malicious actor to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the Mobile Service sub-component of the BI Publisher formerly XML Publisher software platform from Oracle Fusion Middleware is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a perpetrator to compromise data integrity, gain access to confidential information, and cause partial service disruption.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise data integrity, gain access to confidential information, and cause partial service...

The vulnerability of the Server component of the Oracle MySQL Server database management system allows a hacker to cause a service failure or gain access to modify, add, or delete data.

The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain access to modify, add, or delete data...

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component of the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized...

The vulnerability of the Order Tracker sub-component of the Oracle iStore component in the Oracle E-Business Suite system allows a perpetrator to access data for modification, addition, or deletion, or to gain unauthorized access to protected information.

The vulnerability of the Order Tracker sub-component of the Oracle iStore component in the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Content sub-component of the Oracle Content Manager system, a business automation solution from Oracle E-Business Suite. This vulnerability allows attackers to gain access to modify, add, or delete data.

The vulnerability of the Content sub-component of the Oracle Content Manager component in the Oracle E-Business Suite system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to cause the system to freeze or fail to operate properly.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause the system to become unresponsive or to fail in service...

The vulnerability of the Microsoft Windows Update Client application on Windows operating systems allows a malicious individual to escalate their privileges.

The vulnerability of the Microsoft Windows Update Client application for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Microsoft Windows Update Client application on Windows operating systems allows a malicious individual to escalate their privileges.

The vulnerability of the Microsoft Windows Update Client application for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to deficiencies in access control, allows a violator to gain unauthorized access to information.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information...

The vulnerability of the JCE component of the Java SE software platform, which allows a hacker to trigger a service failure

The vulnerability of the JCE component of the Java SE software platform is related to lack of access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

PT-2019-3577 · Mysql Server +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.17 and prior Description: The issue is related to inadequate access control in the MySQL Server product, specifically in the Server: C API component. It allows an attacker with network access via multiple protocols t...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component of the Oracle MySQL ServerL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures using the MySQL protocol...

The vulnerability of the InnoDB component in the MySQL Server database management system allows a attacker to cause service interruptions.

The vulnerability of the InnoDB component in the MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The DDL system for managing MySQL databases involves deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...