Oracle MySQL Server Component Input Validation Error Vulnerability (CNVD-2019-26674)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. Input validation error vulnerability in the InnoDB subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.16 and earlier. An attacke...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26665)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the MySQL Server component of Oracle MySQL, version 5.7.26 and earlier, and the Server:...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28436)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software, the software provides customer relationship management, service management, financial management and other functions. The software provides customer...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26666)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Replication subcomponent of the MySQL Server component in Oracle MySQL, version...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28430)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management, etc. Applications Manager is one of the components used to monitor the...

Oracle Database Server Core RDBMS Component Privilege Permission and Access Control Issues Vulnerability

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions.Core RDBMS is one of the relational database core components. A security vulnerability...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26527)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Replication subcomponent of the MySQL Server component in Oracle MySQL, version...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28442)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. payments is one of the payment management component. ...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28429)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software, the software provides customer relationship management, service management, financial management and other functions. The software provides customer...

Oracle WebLogic Server Component Access Control Error Vulnerability (CNVD-2019-27102)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. WebLogic Server is one of the application server components for cloud and traditional...

Oracle WebLogic Server Component Access Control Error Vulnerability (CNVD-2019-27103)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

PT-2019-16514 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue affects the MySQL Server component, specifically the InnoDB subcomponent. It allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL...

PT-2019-4924 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.6.44 and prior MySQL Server versions 5.7.26 and prior MySQL Server versions 8.0.16 and prior Description: The issue is related to inadequate access control in the MySQL Server component, specifically in the Security:...

PT-2019-16502 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue allows a low-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to cause a han...

OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

Amazon Linux 2 : libX11 (ALAS-2019-1226)

An off-by-one error has been discovered in libX11 in functions XGetFontPath, XListExtensions, and XListFonts. An attacker who can either configure a malicious X server or modify the data coming from one could use this flaw to make the program crash or have other unspecified effects, caused by the...

SAP NetWeaver Process Integration Clickjacking Vulnerability

SAP NetWeaver Process Integration PI is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is mainly used for the exchange of information between the internal system and the external. A clickjacking vulnerability...

CVE-2019-0305

Java Server Pages JSPs provided by the SAP NetWeaver Process Integration SAPXIESR and SAPXITOOL: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 do not restrict or incorrectly restrict frame objects or UI layers that belong to another application or domain, resulting in Clickjacking vulnerability...

HackerOne: Disabled account can still use GraphQL endpoint

Summary Hi team & @jobert, I am not sure if it is by design. After disabling the account, the user will be forced to Enable his account after logging in. However, many of actions are implemented using GraphQL endpoint which bypasses account reactivation process before use. Since re-enabling the...

mysql: InnoDB unspecified vulnerability (CPU Jul 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...