CVE-2019-3025

CVE-2019-3025 affects Oracle Hospitality RES 3700, specifically version 5.7. The flaw allows an unauthenticated attacker over HTTP to take over Oracle Hospitality RES 3700, with CVSS v3.1 base score 9.0 (Network, HIGH impact on Confidentiality, Integrity, Availability). Exploit code and public wr...

CVE-2019-2952

CVE-2019-2952 affects Oracle Hospitality Reporting and Analytics (Oracle Food and Beverage Applications) version 9.1.0. The vulnerability allows an unauthenticated attacker who can reach the service over HTTP to compromise data, with exploitation requiring user interaction. The impact, as describ...

CVE-2019-2947

The CVE-2019-2947 entry concerns Oracle Hospitality Reporting and Analytics (component of Oracle Food and Beverage Applications), affected in version 9.1.0. The description specifies an easily exploitable issue where a low-privileged attacker with Inventory Integration privilege and network acces...

CVE-2019-2937

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin - Configuration privilege with network access via HTTP ...

CVE-2019-2936

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Difficult to exploit vulnerability allows low privileged attacker having Admin - Configuration privilege with network access via HTT...

CVE-2019-2936

CVE-2019-2936 affects Oracle Hospitality Reporting and Analytics (Oracle Food and Beverage Applications) 9.1.0. The vulnerability allows a low-privilege attacker with Admin - Configuration privilege, with network access via HTTP, to cause unauthorized creation/modification/deletion of data and ga...

CVE-2019-2936

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Difficult to exploit vulnerability allows low privileged attacker having Admin - Configuration privilege with network access via HTT...

CVE-2019-2937

CVE-2019-2937 affects the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications, specifically version 9.1.0. The vulnerability can be exploited over the network via HTTP by a low-privileged attacker with Admin - Configuration privileges, enabling unauthoriz...

CVE-2019-2934

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin - Configuration privilege with network access via HTTP ...

CVE-2019-2934

CVE-2019-2934 affects Oracle Hospitality Reporting and Analytics (Oracle Food and Beverage Applications), specifically version 9.1.0. The Red Hat/Oracle/NVD/CVE records describe a vulnerability that allows a low-privileged attacker with Admin – Configuration privileges and network access via HTTP...

Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I)

1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable locally Vendor: Siemens Equipment: Industrial Products Vulnerability: Improper privilege management 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-16-313-02 Siemens Industrial Products Local...

Critical Bugs Open Food-Safety Systems to Remote Attacks

Two critical vulnerabilities in a food-quality management software package would allow adversaries to completely compromise the system. The issues affect the AK-EM 800 product from SCADA vendor Danfoss. It’s an enterprise management solution for the food retail industry that provides a central...

Code Execution Vulnerability in ZZCMS2019

ZZCMS with product investment templates, you can quickly build product investment website. For example, the pharmaceutical investment industry, health care investment industry, cosmetics investment industry, agricultural investment industry, pregnancy and child investment industry, alcohol and fo...

CVE-2019-2833

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 18.2.1. Easily exploitable vulnerability allows low privileged attacker having Import/Export privilege with network access via HTTP to compromise Oracle...

CVE-2019-2763

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. Supported versions that are affected are 9.0.0 and 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Gif...

Buffer overflow

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. Supported versions that are affected are 9.0.0 and 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Gif...

Buffer overflow

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 18.2.1. Easily exploitable vulnerability allows low privileged attacker having Import/Export privilege with network access via HTTP to compromise Oracle...

CVE-2019-2833

CVE-2019-2833 affects Oracle Hospitality Simphony within Oracle Food and Beverage Applications, with the 18.2.1 release identified as vulnerable. The flaw enables a low-privileged attacker who has Import/Export privileges and network access via HTTP to potentially compromise Simphony and gain una...

CVE-2019-2836

CVE-2019-2836 affects Oracle Hospitality Simphony within Oracle Food and Beverage Applications (affected version 18.2.1). An unauthenticated attacker with network access via HTTP can compromise Simphony, potentially gaining unauthorized access to critical data or complete access to all Oracle Hos...

CVE-2019-2763

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. Supported versions that are affected are 9.0.0 and 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Gif...