About the security content of tvOS 12.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Fedora Update for kernel FEDORA-2019-3dbfaeac73

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

AVM FRITZ!WLAN Repeater / FRITZ!OS Detection Consolidation

Consolidation of AVM FRITZ!WLAN Repeater and FRITZ!OS detections. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Apache VCL SQL Injection Vulnerability (CNVD-2019-25063)

Apache VCL is a set of open source cloud computing platform of the U.S. Apache Apache Software Foundation. A SQL injection vulnerability exists in Apache VCL versions 2.1 through 2.5. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

Wanted: Cybersecurity Imagery

Eli Sugarman of the Hewlettt Foundation laments about the sorry state of cybersecurity imagery: The state of cybersecurity imagery is, in a word, abysmal. A simple Google Image search for the term proves the point: It's all white men in hoodies hovering menacingly over keyboards, green...

Multiple Apple Products Foundation Component Buffer Overflow Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. foundation is a framework that provides the basic system services for all applications. Foundation is o...

Oracle Retail Applications Retail Customer Management and Segmentation Foundation Component Access Control Error Vulnerability (CNVD-2019-39858)

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation Oracle. The product includes inventory management, sales management and customer management, etc. Retail Customer Management and Segmentation Foundation is one of the retail customer management...

CVE-2019-2837

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3316

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications subcomponent: Segment. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-3316

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications subcomponent: Segment. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-3315

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications subcomponent: Customer. Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP...

CVE-2018-3315

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications subcomponent: Customer. Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP...

Design/Logic Flaw

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications subcomponent: Customer. Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP...

Design/Logic Flaw

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2837

CVE-2019-2837 affects Oracle E-Business Suite’s Oracle CRM Technical Foundation (subcomponent: User Interface). Affected versions are 12.1.3 and 12.2.3–12.2.8. The vulnerability is exploitable over network via HTTP by an unauthenticated attacker; successful exploitation requires user interaction,...

CVE-2018-3315

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications subcomponent: Customer. Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP...

CVE-2018-3315

CVE-2018-3315 affects Oracle Retail Applications’ Retail Customer Management and Segmentation Foundation (subcomponent: Customer). Affected versions are 16.0 and 17.0. The issue is exploitable by a low-privilege, network-accessible attacker over HTTP, potentially allowing unauthorized creation, d...

CVE-2018-3315

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications subcomponent: Customer. Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP...

Linux Foundation ONOS Remote Command Execution Vulnerability

Linux Foundation ONOS is a carrier-grade SDN network operating system. A remote command execution vulnerability exists in the runJavaCompiler method in YangLiveCompilerManager.java in Linux Foundation ONOS 1.15.0 and earlier. The vulnerability stems from improper input validation. An attacker can...

Eclipse Foundation Mosquitto Pattern Based ACL Bypass (CVE-2017-7650)

An ACL bypass vulnerability has been reported in Eclipse Foundation Mosquitto. A remote user can exploit this vulnerability by sending a crafted request to the target server...