PT-2019-16482

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue affects the Oracle Payments component, specifically the File Transmission subcomponent. It allows an...

PT-2019-16483

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue affects the Oracle Payments component, specifically the File Transmission subcomponent. It allows an...

CVE-2019-2773: Undefined Security Weakness

Vulnerability in the Oracle Payments component of Oracle E-Business Suite subcomponent: File Transmission. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2019-2775: Undefined Security Weakness

Vulnerability in the Oracle Payments component of Oracle E-Business Suite subcomponent: File Transmission. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2019-2783: Undefined Security Weakness

Vulnerability in the Oracle Payments component of Oracle E-Business Suite subcomponent: File Transmission. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2019-2782: Undefined Security Weakness

Vulnerability in the Oracle Payments component of Oracle E-Business Suite subcomponent: File Transmission. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28443)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. payments is one of the payment management component. ...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28431)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. payments is one of the payment management component. ...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28432)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. payments is one of the payment management component. ...

Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28442)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. payments is one of the payment management component. ...

PT-2018-14750

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Network Configuration Manager and OpManager versions prior to 12.3.214 Description A vulnerability exists that allows for XML External Entity injection XXE via the RequestXML parameter in a "/devices/ProcessRequest.do" API...

DSS TFTP directory traversal

Directory traversal on file transmission...

PT-2014-4212

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 28.0 on Android Description A directory traversal issue in the Android Crash Reporter component allows attackers to trigger the transmission of local files to arbitrary servers or cause a denial of service by...

JP1/File Transmission Server / FTP vulnerable to access control violation

Overview JP1/File Transmission Server/FTP has a vulnerability where an FTP client with limited access rights can bypass the access control and access arbitrary directories on the FTP server when enabling the directory access control function. Impact An attacker with login privileges to the FTP...

Hitachi JP1/File Transmission Server/FTP安全绕过漏洞

JP1/File Transmission Server/FTP是日立公司设计的基于FTP的文件传输服务器。 安全问题是由于应用程序没有正确限制访问目录，可被利用来访问其它受限制的目录。 0 Hitachi JP1/File Transmission Server/FTP 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.hitachi.co.jp/Prod/comp/soft1/global/prod/jp1/popup/ftp.html...

Multiple Vulnerabilities in Hitachi JP1/File Transmission Server/FTP

Overview Hitachi JP1/File Transmission Server/FTP contains multiple vulnerabilities. FTP Bounce Attack in PASV mode Buffer overflow at file transmission Defect of the account information check in user authentication Impact A remote attacker could access arbitrary files in system. Solution Please...

#Blackhat Conference : Square Mobile Gadget allows to Hack Credit Cards

Blackhat Conference : Square Mobile Gadget allows to Hack Credit Cards Researchers at the Black Hat security conference today revealed two ways the Square payment system , which turns any iPhone, iPad or Android into a point-of-sale credit card processor, could be used for fraud. Square a mobile...

#Blackhat Conference : Square Mobile Gadget allows to Hack Credit Cards

Blackhat Conference : Square Mobile Gadget allows to Hack Credit Cards Researchers at the Black Hat security conference today revealed two ways the Square payment system, which turns any iPhone, iPad or Android into a point-of-sale credit card processor, could be used for fraud. Square a mobile...

Multiple Vulnerabilities in Hitachi JP1/File Transmission Server/FTP

Overview Hitachi JP1/File Transmission Server/FTP contains multiple vulnerabilities that could allow an attacker to execute arbitrary commands. Impact A remote attacker could execute arbitrary commands. Solution Please refer to the 'Vendor Information' section for the official countermeasure and...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Hitachi JP1/File Transmission Server/FTP before 09-00 allow remote attackers to execute arbitrary code via unknown attack vectors...