6831 matches found
[SECURITY] Fedora 26 Update: jackson-databind-2.7.6-5.fc26
General data-binding functionality for Jackson: works on core streaming API...
[SECURITY] Fedora 25 Update: libgcrypt-1.7.9-1.fc25
Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...
WordPress wp-noexternallinks plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. wp-noexternallinks plugin is one of the link conversion plugin . A cross-site scripting vulnerability exists in...
FBI Increases Its Anti-Encryption Rhetoric
Earlier this month, Deputy Attorney General Rod Rosenstein gave a speech warning that a world with encryption is a world without law -- or something like that. The EFF's Kurt Opsahl takes it apart pretty thoroughly. Last week, FBI Director Christopher Wray said much the same thing. This is an ide...
CVE-2017-10060
This CVE (CVE-2017-10060) affects Oracle Business Intelligence Enterprise Edition (OBIEE) within Oracle Fusion Middleware, specifically the Analytics Web General subcomponent. Affected versions are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, and 12.2.1.2.0. The vulnerability can be exploited by an unauth...
CVE-2017-10163: Undefined Security Weakness
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Web General. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attack...
CVE-2017-10060: Undefined Security Weakness
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Web General. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated...
Oracle Java SE Security Update (cpuoct2017 - 03) - Linux
Oracle Java SE is prone to an unspecified vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Unspecified Vulnerability in Oracle Business Intelligence Enterprise Edition (CNVD-2017-31687)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other functionality.Oracle Business Intelligence Enterprise Edition is one of the business intelligence...
Unspecified Vulnerability in Oracle Business Intelligence Enterprise Edition (CNVD-2017-31689)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other functionality.Oracle Business Intelligence Enterprise Edition is one of the business intelligence...
general-store.cz XSS vulnerability
Vulnerable URL: http://www.general-store.cz/produkt.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10937036 VIP website status:| No Coordinated Disclosure Timeline:...
How to resolve "A general system error has occurred:vim.fault.genericvmconfigfault" error
You may receive an error when performing any operation on a Unidesk machine, including backups or even just powering the machine on: A general system error has occurred:vim.fault.genericvmconfigfault If your investigation leads you to check the snapshot configuration, and the snapshots are just...
bsp.to XSS vulnerability
Vulnerable URL: http://www.bsp.to/General/Search.aspx?q=1%2522%2527--%253E%253CSvg%2520O%256ELoad%253Dconfirm%25281%2529%253E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1488161...
InsideSecure MatrixSSL x509 certificate General Names Information Disclosure Vulnerability(CVE-2017-2782)
Summary An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a length counter to overflow, leading to a controlled out of bounds copy operation. To trigger this vulnerability, a...
Unspecified Vulnerability in Oracle Hospitality WebSuite8 Cloud Service Component
Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer satisfaction,...
People's Liberation Army Naval General Hospital Android app has password bypass vulnerability
The Naval General Hospital app is a handheld medical platform launched by the Naval General Hospital of the Chinese People's Liberation Army. A password bypass vulnerability exists in the People's Liberation Army Naval General Hospital Android App. An attacker can log into the VIP account and...
MantisBT 1.2.13 - 1.2.19 'adm_config_report.php' XSS Vulnerability - Windows
MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
General Motors and Shanghai OnStar (SOS) iOS Client
CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: General Motors GM, Shanghai OnStar SOS Equipment: SOS iOS Client Vulnerabilities: Cleartext Storage of Sensitive Information, Man-in-the-Middle, Improper Authentication REPOSTED INFORMATION This advisory was originall...