CVE-2019-3483

CVE-2019-3483 concerns ArcSight Logger prior to 6.7. The related documents indicate an information-disclosure vulnerability in ArcSight Logger versions before 6.7 and that mitigation exists for those versions. No exploitation details or patch version are explicitly provided in the connected docum...

CVE-2019-3483

Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3482

The CVE concerns a directory traversal vulnerability in Micro Focus ArcSight Logger before version 6.7. Root cause: improper handling of path input leading to unauthorized information disclosure. Affected product: ArcSight Logger (versions prior to 6.7). Impact: potential disclosure of sensitive ...

CVE-2019-3482

Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3481

CVE-2019-3481 concerns a XML External Entity (XXE) parsing vulnerability in Micro Focus ArcSight Logger prior to version 6.7. The issue stems from insecure XML entity handling in the affected logger, enabling information disclosure or disruption of service as described in CNVD-2019-08313 (and mir...

CVE-2019-3481

Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3480

Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3480

ArcSight Logger prior to version 6.7 is affected by a cross-site scripting vulnerability (stored/reflected XSS). The CNVD entry confirms a XSS issue in ArcSight Logger = 6.7 or applying vendor-provided fixes, as described in the CNVD/CVE references. If applying updates, verify release notes speci...

CVE-2019-3479

Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7...

CVE-2019-3479

CVE-2019-3479 affects Micro Focus ArcSight Logger prior to 6.7, describing an input validation vulnerability that could allow remote code execution. The connected CNVD entry confirms the issue is a remote code execution vulnerability affecting ArcSight Logger versions before 6.7. There are no exp...

Kibana ESA-2019-01, ESA-2019-02, ESA-2019-03

Kibana versions before 5.6.15 and 6.6.1 have the following vulnerabilities: - A cross-site scripting XSS vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users. CVE-2019-7608 - An arbitrary code execution flaw...

CVE-2018-3125

Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications subcomponent: Security SQL Logger. The supported version that is affected is 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Buffer overflow

Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications subcomponent: Security SQL Logger. The supported version that is affected is 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3125

Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications subcomponent: Security SQL Logger. The supported version that is affected is 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3125

CVE-2018-3125 affects Oracle Retail Merchandising System (Oracle Retail Applications), specifically the Security (SQL Logger) subcomponent. Affected version 14.1 is vulnerable to unauthenticated HTTP access that can lead to unauthorized read, update, insert, or delete operations on Oracle Retail ...

Open Source IPS: Suricata

Suricata is a free and open source, mature, fast and robust network threat detection engine. The Suricata engine is capable of real time intrusion detection IDS, inline intrusion prevention IPS, network security monitoring NSM and offline pcap processing. Suricata inspects the network traffic usi...

br.net.woodstock.rockframework:rockframework-core (>=1.2.1 <=1.2.2), com.alanpoi:alanpoi-all (>=1.3.5 <=3.0.0) +64 more potentially affected by CVE-2016-1000344 via org.bouncycastle:bcprov-jdk14 (>=1.38 <=1.55)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.38, =1.2.1, =1.3.5, =1.3.5, =2.0, =1.0, =1.6.1.P24, =1.7, =0.0.1, =1.0, =1.1 - com.github.lkkushan101.RestAssuredPDFReport:com.github.lkkushan101.RestAssuredPDFReport =1.00 - com.github.lkkushan101.appiumlocator:com.github.lkkushan101.appiumlocator...

VBScan 0.1.8 - Black Box vBulletin Vulnerability Scanner

OWASP VBScan short for VBulletin Vulnerability Scanner is an opensource project in perl programming language to detect VBulletin CMS vulnerabilities and analyses them . Why OWASP VBScan ? If you want to do a penetration test on a vBulletin Forum, OWASP VBScan is Your best shot ever! This Project ...

Zemana Anti-Logger Unauthorized Operation Vulnerability

Zemana Anti-Logger is an active defense software from Zemana Bosnia-Herzegovina. The program features anti-keylogging, anti-screen capture, anti-webcam logging and anti-clipboard logging. A security vulnerability exists in the implementation of permissions and encryption in Zemana Anti-Logger...

Design/Logic Flaw

A vulnerability in the permission and encryption implementation of Zemana Anti-Logger 1.9.3.527 and prior fixed in 1.9.3.602 allows an attacker to take control of the whitelisting feature MyRules2.ini under %LOCALAPPDATA%\Zemana\ZALSDK to permit execution of unauthorized applications such as ones...