The vulnerability of the SAP UI5 software-based HTTP handler allows attackers to compromise the integrity of protected information.

The vulnerability of the SAP UI5 software application’s HTTP handler is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to influence the integrity of the protected information...

Unspecified Vulnerability in Oracle Financial Services Applications FLEXCUBE Universal Banking (CNVD-2020-09655)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The products include core banking, online banking and property management, etc. FLEXCUBE Universal Banking is one of the Internet and mobile banking solution components. An unspecified vulnerability...

Unspecified Vulnerability in Oracle Enterprise Manager Base Platform (CNVD-2020-03236)

Oracle Enterprise Manager Base Platform is a complete installer that includes OMS, agents, repositories, and management plug-ins. An unspecified vulnerability exists in Oracle Enterprise Manager Base Platform. An attacker could exploit this vulnerability to gain unauthorized access to, update,...

Unspecified Vulnerability in Oracle GraalVM Enterprise Edition (CNVD-2020-09692)

Oracle GraalVM is the United States Oracle Oracle company's set of instant compiler written in the Java language. The product supports a variety of programming languages and execution modes.GraalVM Enterprise Edition is the enterprise version of GraalVM. An unspecified vulnerability exists in...

Unspecified Vulnerability in Oracle Financial Services Applications FLEXCUBE Universal Banking (CNVD-2020-09656)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The products include core banking, online banking and property management, etc. FLEXCUBE Universal Banking is one of the Internet and mobile banking solution components. An unspecified vulnerability...

Unspecified Vulnerability in Oracle Enterprise Manager Base Platform (CNVD-2020-04358)

Oracle Enterprise Manager Base Platform is a complete installer that includes OMS, agents, repositories, and management plug-ins. An unspecified vulnerability exists in Oracle Enterprise Manager Base Platform. An attacker could exploit this vulnerability to gain unauthorized access to, update,...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-04348)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in Oracle Database Server. An attacker could exploit this vulnerability to unauthorized update,...

PT-2020-1307 · Oracle · Oracle Identity Manager

Name of the Vulnerable Software and Affected Versions: Oracle Identity Manager versions 11.1.2.3.0 through 12.2.1.3.0 Description: The issue is related to inadequate access control in the Advanced Console component of Oracle Identity Manager. It can be exploited by a remote attacker to compromise...

PT-2020-1309 · Oracle · Oracle Database

Name of the Vulnerable Software and Affected Versions: Oracle Database versions 12.1.0.2 through 19c Description: The issue exists due to insufficient input validation in the Core RDBMS component of Oracle Database. Exploitation of this issue may allow an attacker to impact data integrity or caus...

The vulnerability of the anti-spam protection mechanism of the Cisco Email Security Appliance (ESA) allows attackers to bypass the configured content filters and compromise the integrity of the protected information.

The vulnerability of the anti-spam protection mechanism of Cisco Email Security Appliance relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the configured content filters and compromise the integrity of the protected information...

The vulnerability of the Apache Spark framework, related to deficiencies in the authentication process, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Apache Spark framework is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the SAP Process Integration integration platform, related to insufficient verification of data authenticity, allows attackers to compromise the integrity of the protected information.

The vulnerability of the SAP Process Integration integration platform is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

CVE-2019-16789

An HTTP-interpretation flaw was found in waitress, through version 1.4.0. If a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially...

New SHA-1 Attack

There's a new, practical, collision attack against SHA-1: In this paper, we report the first practical implementation of this attack, and its impact on real-world security with a PGP/GnuPG impersonation attack. We managed to significantly reduce the complexity of collisions attack against SHA-1: ...

CVE-2018-10465

Jamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with access to log in to Jamf Pro had full access to endpoints in the Universal API UAPI, regardless of account privileges or privilege sets. An authenticated Jamf Pro account without required privileges...

CVE-2018-10465

Jamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with access to log in to Jamf Pro had full access to endpoints in the Universal API UAPI, regardless of account privileges or privilege sets. An authenticated Jamf Pro account without required privileges...

Information disclosure

Jamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with access to log in to Jamf Pro had full access to endpoints in the Universal API UAPI, regardless of account privileges or privilege sets. An authenticated Jamf Pro account without required privileges...

Huawei USG9500 Credential Mismanagement Vulnerability

Huawei USG9500 is a data center firewall product from Huawei, China. A security vulnerability exists in the Huawei USG9500, which arises from the program failing to properly manage credentials. An attacker could exploit the vulnerability to cause information leakage or corruption, compromising th...

The vulnerability of LibreOffice and Apache OpenOffice office programs lies in their automatic opening of embedded content, which allows attackers to compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of LibreOffice and Apache OpenOffice desktop software relates to the automatic opening of embedded content. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, confidentiality, and accessibility of protected information...

The vulnerability of the Kubernetes cluster management software lies in insufficient validation of input data, allowing attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Kubernetes cluster management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...