9707 matches found
PT-2020-2302
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access controls in the User Interface component of Oracle Advanced Outbound Telephony, allowing an unauthenticated attacker with network...
PT-2020-2536
Name of the Vulnerable Software and Affected Versions Oracle GraalVM Enterprise Edition versions 19.3.1 and 20.0.0 Description The issue is related to insufficient access controls in the GraalVM Compiler component of Oracle GraalVM Enterprise Edition. It can be exploited by a remote attacker with...
PT-2020-2323
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Courseware component of Oracle Quoting, allowing an unauthenticated attacker with network access via HTTP to compromis...
PT-2020-2306
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Estimate and Actual Charges component of Oracle Depot Repair. It allows an unauthenticated attacker with network acces...
PT-2020-2578
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to insufficient access controls in the nVision component of Oracle PeopleSoft Enterprise PeopleTools. It can be exploited by a remote attacker to cau...
PT-2020-2303
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access controls in the User Interface component of Oracle Advanced Outbound Telephony, allowing an unauthenticated attacker with network...
PT-2020-2326
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Print Server component of Oracle One-to-One Fulfillment. It allows an unauthenticated attacker with network access via...
PT-2020-2494
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 Description The issue is related to insufficient access controls in the Console component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HTT...
Cisco Webex Meetings Access Control Error Vulnerability
Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. An access control error vulnerability exists in the Multimedia Viewer feature of Cisco Webex Meetings, which originates from a security warning dialog box that does not pop up when the host of the meeting room views a...
PT-2020-2321
Name of the Vulnerable Software and Affected Versions Oracle Marketing versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access controls in the Marketing Administration component of Oracle Marketing. It can be exploited by a remote attacker to gain unauthorized acces...
VMware vCenter Server 6.7 Sensitive Information Disclosure Vulnerability (VMSA-2020-0006)
The version of VMware vCenter Server installed on the remote host is 6.7 prior to U3F, and is, therefore, affected by an information disclosure vulnerability caused by insufficient access controls in vmdir. This allows an attacker with network access to an affected vmdir deployment may be able to...
CVE-2020-3952
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller PSC, does not correctly implement access controls...
CVE-2020-3952
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller PSC, does not correctly implement access controls...
CVE-2020-3952 - VMware vCenter Server vmdir Information Disclosure
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller PSC, does not correctly implement access controls. Recent assessments: wvu-r7 at April 16, 2020 1:25pm UTC reported: Technical details on the vuln are out:...
An update that enables Internet Explorer in Windows Vista or in Windows Server 2008 to parse fragmented TLS/SSL handshake messages is available
An update that enables Internet Explorer in Windows Vista or in Windows Server 2008 to parse fragmented TLS/SSL handshake messages is available Warning: The retired, out-of-support Internet Explorer 11 desktop application has been permanently disabled through a Microsoft Edge update on certain...
CVE-2019-18802
A flaw was found in envoy. A malformed request header may cause route matchers or access controls to be bypassed, resulting in escalation of privileges or information disclosure. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
Secure Remote Working During COVID-19 — Checklist for CISOs
Coronavirus crisis introduces a heavy burden on the CISOs with the collective impact of a mass transition to working remotely coupled with a surge of cyberattacks that strive to monetize the general chaos. Security vendors, unintendedly, contribute to this burden by a relentless generation of noi...
Protecting your data and maintaining compliance in a remote work environment
In this difficult time, remote work is becoming the new normal for many companies around the world. Employees are using tools like Microsoft Teams to collaborate, chat, and connect in new ways to try to keep their businesses moving forward amidst the challenging global health crisis. I sincerely...
Remote Code Execution Via Path Traversal
github.com/slackhq/nebula is vulnerable to remote code execution via path traversal. Lack of handling of the user-provided unsafe routes in tundarwin.go or tunwindows.go allows an attacker to set a relative-path value and gain privileges of root-user to bypass security controls and to execute...