CVE-2019-2407

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracl...

CVE-2019-2402

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successfu...

CVE-2019-2438

Vulnerability in the Oracle Web Cache component of Oracle Fusion Middleware subcomponent: ESI/Partial Page Caching. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Cache...

CVE-2019-2439

The CVE-2019-2439 entry concerns Oracle PeopleSoft Enterprise PeopleTools Portal (subcomponent) impacting versions 8.55–8.57. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, with attacks requiring user interaction...

CVE-2019-2423

CVE-2019-2423 affects Oracle PeopleSoft Enterprise PeopleTools (PIA Search subcomponent) with affected versions 8.55, 8.56, and 8.57. The vulnerability enables unauthenticated remote access over HTTP to potentially update, insert, delete, or read data in PeopleSoft PeopleTools and is described as...

CVE-2019-2425

CVE-2019-2425 affects Oracle Hospitality Reporting and Analytics, a component of Oracle Food and Beverage Applications. Affected product/version: 9.1.0. The vulnerability allows an unauthenticated, network-accessible attacker (HTTP) to compromise data: unauthorized updates/insertions/deletions an...

PT-2019-1338

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue is related to insufficient access control in the Oracle Email Center component, specifically in the Message...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28449)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. partner management is one of the...

Hack Allows Escape of Play-with-Docker Containers

Researchers hacked the Docker test platform called Play-with-Docker, allowing them to access data and manipulate any test Docker containers running on the host system. The proof-of-concept hack does not impact production Docker instances, according to CyberArk researchers that developed the...

WordPress 4.8.x < 4.8.8 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Authors could alter meta data to delete files that they weren't authorized to. - Authors could create posts of unauthorized types with specially crafted input. -...

F5 BIG-IP APM and BIG-IP APM Clients svpn elevation of privilege vulnerability

F5 BIG-IP APM and BIG-IP APM Clients are both products of F5 Corporation in the U.S. F5 BIG-IP APM is a suite of access and security solutions. the APM Client is a suite of APM client software. svpn is one of the private VPN components. An elevation of privilege vulnerability exists in F5 BIG-IP...

Amazon Linux 2 : java-1.7.0-openjdk (ALAS-2018-1111)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

mysql: Server: DML unspecified vulnerability (CPU Apr 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-15692

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions...

Authorization

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions...

CVE-2018-15692

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions...

CVE-2018-15692

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions...

CVE-2018-15692

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier is affected by an authorization bypass that allows authenticated users to access restricted functionality and manipulate data in certain functions. This vulnerability is described across multiple sources (NVD entry CVE-2018-15692 and CNVD/P...

PT-2018-13144

Name of the Vulnerable Software and Affected Versions Inova Partner versions 5.0.5-RELEASE, Build 0510-0906 and earlier Description The issue allows authenticated users to bypass authorization and manipulate data in certain functions. Recommendations For versions 5.0.5-RELEASE, Build 0510-0906 an...

CVE-2018-15692: Incorrect Authorization

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions...