Mozilla: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

ProcDump - A Linux Version Of The ProcDump Sysinternals Tool

ProcDump is a Linux reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux developers to create core dumps of their application based on performance triggers. Installation & Usage Requirements Minimum OS: Red Hat...

The vulnerability of the Oracle Performance Management (Performance Management Plan) component of the Oracle E-Business Suite automation system, which allows a perpetrator to modify protected information

The vulnerability of the Oracle Performance Management component Performance Management Plan within the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to modify protected information using the HTT...

Performance Impacts of Deduplicated Storage Systems

To learn about Deduplication Appliance Best Practices, visit KB1745. Challenge The following Veeam technologies are dependent on primary backup storage random I/O performance: Instant Recovery VM/Disk/NAS/Databases Windows and Linux File Level Recovery Application Restore Cloud Tiering Cloud...

Oracle E-Business Multiple Vulnerabilities (Jan 2019 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2019 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the January 2019 Critical Patch Update advisory : - Oracle CRM Technical Foundation Messages component is...

CVE-2019-2529 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2019-2453

Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite subcomponent: Performance Management Plan. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2453

Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite subcomponent: Performance Management Plan. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2417

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Performance Monitor. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Design/Logic Flaw

Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite subcomponent: Performance Management Plan. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2453

Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite subcomponent: Performance Management Plan. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2453

Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite subcomponent: Performance Management Plan. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2453

CVE-2019-2453 is a vulnerability in the Oracle E-Business Suite, affecting the Performance Management Plan subcomponent of the Performance Management module. Documents in connected sources confirm that versions 12.1.1, 12.1.2, and 12.1.3 are affected. The underlying issue enables an unauthenticat...

Mobile Optimization Should be Your Highest Priority

Predicting and preparing for peak traffic volume and resource demands is a difficult task for online retailers around the world. They need to be ready for both expected and unexpected traffic spikes at any time. No one wants the CEO on their doorstep asking why their website is down and losing...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-28466)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28453)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. performance Management is one of...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Netcool Performance Manager (CVE-2018-3180, CVE-2018-3139)

Summary WebSphere Application Server is shipped with Tivoli Netcool Performance Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fix...

CVE-2018-15466

A vulnerability in the Graphite web interface of the Policy and Charging Rules Function PCRF of Cisco Policy Suite CPS could allow an unauthenticated, remote attacker to access the Graphite web interface. The attacker would need to have access to the internal VLAN where CPS is deployed. The...

Design/Logic Flaw

A vulnerability in the Graphite web interface of the Policy and Charging Rules Function PCRF of Cisco Policy Suite CPS could allow an unauthenticated, remote attacker to access the Graphite web interface. The attacker would need to have access to the internal VLAN where CPS is deployed. The...

CVE-2018-15466 Cisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerability

A vulnerability in the Graphite web interface of the Policy and Charging Rules Function PCRF of Cisco Policy Suite CPS could allow an unauthenticated, remote attacker to access the Graphite web interface. The attacker would need to have access to the internal VLAN where CPS is deployed. The...