Input validation

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484...

CVE-2018-1749

IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager) is affected by CVE-2018-1749 due to incomplete blacklist-based input validation. Affected versions include IBM Security Key Lifecycle Manager v2.6 (2.6.0.4), v2.7 (2.7.0.3), and v3.0 (3.0.0.1). The root cause is incomplete...

CVE-2018-1749

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484...

Security Bulletin: IBM Security Key Lifecycle Manager is vulnerable to Hazardous Input Validation ( CVE-2018-1749)

Summary IBM Security Key Lifecycle Manager uses incomplete blocklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. Vulnerability Details CVEID: CVE-2018-1749 DESCRIPTION: IBM Tivoli Key Lifecycle Manager...

Simple Authentication and Security Layer (SASL) vulnerabilities

Simple Authentication and Security Layer SASL is an authentication layer used in Internet protocols. SASL is not a protocol, but rather a framework that provides developers of applications and shared libraries with mechanisms for authentication, data integrity–checking, and encryption. Within the...

POSIM EVO for Windows Arbitrary Code Execution Vulnerability

POSIM EVO for Windows is a point-of-sale POS and inventory management system. The system includes features such as customer information management, email marketing and inventory management. An arbitrary code execution vulnerability exists in version 15.13 of POSIM EVO for Windows-based platforms,...

Oracle Database Server Java VM Component Remote Vulnerability

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Java VM is one of the Java virtual machine components. A security vulnerability exists in the Java VM...

The vulnerability of the Core RDBMS component of the Oracle Database management system allows attackers to compromise the integrity and accessibility of protected data.

The vulnerability of the Core RDBMS component of the Oracle Database management system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of the protected data...

iPhone Chip Supplier TSMC Stops Production After Computer Virus Attack

Taiwan Semiconductor Manufacturing Company TSMC—Apple's sole supplier of SoC components for iPhones and iPads, and Qualcomm's major manufacturing partner—shut down several of its chip-fabrication factories Friday night after being hit by a computer virus. The world's largest makers of...

Unspecified Vulnerability in Oracle Retail Applications MICROS Relate CRM Software Component

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation. MICROS Relate CRM Software is one of the customer relationship management components. An unspecified vulnerability exists in the Oracle Retail Applications MICROS Relate CRM Software component. An...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox Component (CNVD-2019-36181)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox Component (CNVD-2019-36182)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle MySQL Client Component Access Control Error Vulnerability

Oracle MySQL is an open source relational database management system from Oracle, MySQL Client is a client component. An access control error vulnerability exists in the Oracle MySQL Client component. An attacker could exploit this vulnerability to unauthorized update, insert, or delete data,...

Oracle Financial Services Applications FLEXCUBE Enterprise Limits and Collateral Management component access control error vulnerability (CNVD-2019-39912)

Oracle Financial Services Applications is Oracle's suite of financial services software that combines core banking, online banking and property management. FLEXCUBE Enterprise Limits and Collateral Management is a component of FLEXCUBE that is used to manage real-time online exposure of products...

Oracle MySQL Server Component Unauthorized Operation Vulnerability

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the Server: Options subcomponent of the MyS...

Unspecified Vulnerability in Oracle MySQL Server Component (CNVD-2019-07351)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the InnoDB subcomponent of the MySQL Server...

Unspecified Vulnerability in Oracle MySQL Server Component (CNVD-2019-07353)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the MyISAM subcomponent of the MySQL Server...

Oracle Retail Applications Retail Customer Management and Segmentation Foundation Component Access Control Error Vulnerability

Oracle Retail Applications is a set of retail application store solutions from Oracle Corporation. Retail Customer Management and Segmentation Foundation is one of the retail customer management components. An access control error vulnerability exists in the Oracle Retail Applications Retail...

Oracle Financial Services Applications Banking Corporate Lending Component Access Control Error Vulnerability

Oracle Financial Services Applications is the United States Oracle Oracle company's set of core banking, online banking and property management in one of the financial services software. Banking Corporate Lending is one of the bank loan management components. An access control error vulnerability...

Oracle Java SE and Java SE Embedded Access Control Error Vulnerability (CNVD-2019-26738)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...