CVE-2019-2850

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2019-2846

CVE-2019-2846 affects Oracle FLEXCUBE Investor Servicing (Infrastructure subcomponent) within Oracle Financial Services Applications. Affected versions include 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. The vulnerability allows an unauthenticated attacker with network acce...

CVE-2019-2823

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 8.0.5-8.0.8. Easily exploitable vulnerability allows low privileged attacker with networ...

CVE-2019-2823

The CVE-2019-2823 entry concerns Oracle Financial Services Applications Infrastructure (subcomponent: Infrastructure) in Oracle Financial Services Applications. Affected versions are 8.0.5–8.0.8. The vulnerability allows a low-privileged attacker who can access over HTTP via the network to cause ...

CVE-2019-2820

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Gnuplot. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2019-2804

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Filesystem. Supported versions that are affected are 11.4 and 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to...

CVE-2019-2794

CVE-2019-2794 concerns a vulnerability in the Oracle FLEXCUBE Universal Banking component (Infrastructure subcomponent) of Oracle Financial Services Applications. Affected versions include 12.0.1–12.0.3, 12.1.0–12.4.0, and 14.0.0–14.2.0. The flaw allows an unauthenticated attacker with network ac...

CVE-2019-2793

CVE-2019-2793 affects Oracle FLEXCUBE Universal Banking (subcomponent: Infrastructure) within Oracle Financial Services Applications. Affected versions are 12.0.1–12.0.3, 12.1.0–12.4.0, and 14.0.0–14.2.0. The vulnerability can be exploited by a low-privileged attacker who can reach the system ove...

CVE-2019-2760

CVE-2019-2760 affects the Data Store component of Oracle Berkeley DB. Affected versions include 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23, and 12.1.6.2.32. The vulnerability enables an unauthenticated attacker with access to the infrastructure where Data Store runs to compro...

CVE-2019-2745

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java...

CVE-2019-2739

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructu...

CVE-2019-2569

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS executes...

CVE-2018-13924

Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2018-13896

XBLSEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lock at XBLSEC stage.. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...

Unspecified Vulnerability in Oracle FLEXCUBE Investor Servicing (CNVD-2019-30456)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...

Unspecified Vulnerability in Oracle FLEXCUBE Investor Servicing (CNVD-2019-30455)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...

Unspecified Vulnerability in Oracle FLEXCUBE Investor Servicing (CNVD-2019-30454)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...

Unspecified Vulnerability in Oracle FLEXCUBE Investor Servicing (CNVD-2019-30457)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...

WaterISAC Releases Cybersecurity Fundamentals

The Water Information Sharing and Analysis Center WaterISAC recently released an updated cybersecurity fundamentals guide for water and wastewater utilities. The guide includes cybersecurity best practices, grouped into 15 categories, to help sector utilities reduce exploitable weaknesses and...

Unspecified Vulnerability in Oracle FLEXCUBE Investor Servicing (CNVD-2019-30453)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...