CVE-2019-2619

Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Grid Infrastructure User privilege with logon to the infrastructure...

CVE-2019-2516

Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Grid Infrastructure User privilege with logon to the infrastructure...

Code injection

Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Grid Infrastructure User privilege with logon to the infrastructure...

Code injection

Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Grid Infrastructure User privilege with logon to the infrastructure...

CVE-2019-2619

Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows high privileged attacker having Grid Infrastructure User privilege with logon to the infrastructure...

TIBCO Security Advisory: April 24, 2019 - TIBCO Active MatrixService Grid -2019-8993

TIBCO Active Matrix Service Grid Administrator Unauthenticated Download of Sensitive File Original release date: April24, 2019 Last revised: CVE-2019-8993 Source: TIBCO Software Inc. TIBCO Active Matrix Service Grid Administrator Unauthenticated Download of Sensitive File Original release date:...

TIBCO Security Advisory: April 24, 2019 - TIBCO Active MatrixService Grid -2019-8992

TIBCO Active Matrix Service Grid Administrator Remote Code Execution Original release date: April 24, 2019 Last revised: CVE-2019-8992 Source: TIBCOSoftware Inc. TIBCO Active Matrix Service Grid Administrator Remote Code Execution Original release date: April 24, 2019 Last revised: -- Source: TIB...

TIBCO Security Advisory: April 24, 2019 - TIBCO Active MatrixService Grid -2019-8992

TIBCO Active Matrix Service Grid Administrator Remote Code Execution Original release date: April 24, 2019 Last revised: CVE-2019-8992 Source: TIBCOSoftware Inc. TIBCO Active Matrix Service Grid Administrator Remote Code Execution Original release date: April 24, 2019 Last revised: -- Source: TIB...

TIBCO Security Advisory: April 24, 2019 - TIBCO Active MatrixService Grid -2019-8991

TIBCO Active Matrix Service Grid Administrator With Multiple Cross-Site Scripting and Cross-Site Request ForgeryVulnerabilities Original release date: April 24, 2019 Last revised: CVE-2019-8991 Source: TIBCO Software Inc. TIBCO Active Matrix Service Grid Administrator With Multiple Cross-Site...

TIBCO Security Advisory: April 24, 2019 - TIBCO Active MatrixService Grid -2019-8991

TIBCO Active Matrix Service Grid Administrator With Multiple Cross-Site Scripting and Cross-Site Request ForgeryVulnerabilities Original release date: April 24, 2019 Last revised: CVE-2019-8991 Source: TIBCO Software Inc. TIBCO Active Matrix Service Grid Administrator With Multiple Cross-Site...

com.hindog.grid:grid-executor-examples_2.11 (>=1.1.0 <=2.0.1) potentially affected by CVE-2017-12625 via org.apache.hive:hive (=2.1.1)

org.apache.hive:hive MAVEN version =2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive and may be impacted: - com.hindog.grid:grid-executor-examples2.11 =1.1.0, =2.0.1 Source cves: CVE-2017-12625 Source advisory:...

Why It's So Hard to Restart Venezuela's Power Grid

Approaching a full week, Venezuela's national power outage shows just how hard it is to restart a grid from scratch...

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.3.52 - Authenticated Option Update vulnerability (Fremius Library security issue)

Authenticated Option Update vulnerability Fremius Library security issue found in WordPress Image Photo Gallery Final Tiles Grid plugin versions = 3.3.52. Solution Update the WordPress Image Photo Gallery Final Tiles Grid plugin to the latest available version at least 3.3.57...

Slack: URL filter bypass in Enterprise Grid

URL filter bypass in Enterprise Grid Description Slack Enterprise Grid seems to be able to add arbitrary column to the profile of the account. In my company there is a おすすめランチ My Favorite Lunch column, and we can set the URL of the website and Display text. F429131 F429132 Only the http: or https...

The vulnerability of the Cisco AMP Threat Grid malware detection platform, related to the insecure creation of API keys, allows attackers to access protected information.

The vulnerability of the Cisco AMP Threat Grid malware detection platform is related to the insecure creation of API keys. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

Cisco AMP Threat Grid Cloud and AMP Threat Grid Appliance software trust management issue vulnerability

Cisco AMP Threat Grid Cloud and AMP Threat Grid Appliance software are both products of Cisco, Inc. The Cisco AMP Threat Grid Cloud is a cloud-based malware and threat intelligence analysis solution. Grid Appliance software is an on-device malware analysis solution. Cisco AMP Threat Grid Cloud an...

CVE-2019-1657

A vulnerability in Cisco AMP Threat Grid could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to unsafe creation of API keys. An attacker could exploit this vulnerability by using insecure credentials to gain unauthorized access to the affected...

Design/Logic Flaw

A vulnerability in Cisco AMP Threat Grid could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to unsafe creation of API keys. An attacker could exploit this vulnerability by using insecure credentials to gain unauthorized access to the affected...

CVE-2019-1657

A vulnerability in Cisco AMP Threat Grid could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to unsafe creation of API keys. An attacker could exploit this vulnerability by using insecure credentials to gain unauthorized access to the affected...

CVE-2019-1657

CVE-2019-1657 affects Cisco AMP Threat Grid (Cloud and on‑premise Threat Grid Appliance). The issue stems from unsafe API key creation, enabling an authenticated, remote attacker to access sensitive information via API key credentials (information disclosure). Likely impact to confidentiality is ...