4230 matches found
CVE-2018-2853
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Operations, Client Application Loader. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network acces...
CVE-2018-2847
CVE-2018-2847 affects Oracle Hospitality Simphony First Edition, Operations subcomponent, with affected versions 1.6 and 1.7. A connected document (PRION/CVE-2018-2847) indicates a buffer overflow as the underlying issue, allowing a low-privilege attacker with network access via HTTP to compromis...
CVE-2018-2848
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Client Application Loader. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...
CVE-2018-2851
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HT...
CVE-2018-2848: Undefined Security Weakness
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Client Application Loader. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...
CVE-2018-2847: Undefined Security Weakness
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Operations. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2018-2851: Undefined Security Weakness
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network access via HT...
CVE-2018-2853: Undefined Security Weakness
Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Operations, Client Application Loader. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows low privileged attacker with network acces...
Unspecified Vulnerability in Oracle Hospitality Simphony First Edition (CNVD-2018-09078)
Oracle Hospitality Simphony First Edition is an enterprise hospitality management platform that delivers point-of-sale POS and back-office functionality on fixed and mobile devices to support stadiums, arenas and other food and beverage operations. An unspecified vulnerability exists in the...
Unspecified Vulnerability in Oracle Hospitality Simphony First Edition (CNVD-2018-09079)
Oracle Hospitality Simphony First Edition is an enterprise hospitality management platform that delivers point-of-sale POS and back-office functionality on fixed and mobile devices to support stadiums, arenas and other food and beverage operations. An unspecified vulnerability exists in the Clien...
CVE-2017-12701
BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition...
Microsoft Office: Disable First Run Movie
This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013firstrunmovie.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable First Run Movie Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Perception Matters: Making RUM More Real
Traditional nav timing metrics have given us a lot in the way of understanding how our pages and apps are performing, but as users' expectations rise and page complexity grows, you need to really understand how users are perceiving the performance of your website beyond traditional page load...
gnome-session: Xsession creation of XDG user directories does not honor system umask policy
It was found that the system umask policy is not being honored when creating XDG user directories /Desktop etc on first login. This could lead to user's files being inadvertently exposed to other local users...
tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser
The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6decodev3...
Word Attachment Delivers FormBook Malware, No Macros Required
A new wave of document attacks targeting inboxes do not require enabling macros in order for adversaries to trigger an infection chain that ultimately delivers FormBook malware. Researchers at Menlo Security are reporting a wave of attacks that began last month that are targeting financial and...
CVE-2018-9230
In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.geturiargs and ngx.req.getpostargs functions that ignore parameters beyond the hundredth one, which might allow remote attackers to bypass intended access restrictions or interfere with certain Web Application Firewall...
first-sensor.com XSS vulnerability
Open Bug Bounty ID: OBB-591185 Description| Value ---|--- Affected Website:| first-sensor.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
go.firsttimebuyerwebinar.com XSS vulnerability
Open Bug Bounty ID: OBB-585514 Description| Value ---|--- Affected Website:| go.firsttimebuyerwebinar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...