Oracle Enterprise Manager CVE-2019-2895 Remote Security Vulnerability

Description Oracle Enterprise Manager is prone to a remote security vulnerability in Enterprise Manager for Exadata. The vulnerability can be exploited over the 'HTTP' protocol. The 'Exadata Plug-In Deploy and Ins' component is affected. This vulnerability affects the following supported versions...

Siemens SCALANCE X Plug-in accessory STP991-1

Binary data 765080.prm...

Siemens SCALANCE X Plug-in accessory SFP991-1

Binary data 765093.prm...

Siemens SCALANCE X Plug-in accessory SFP993-1

Binary data 765105.prm...

Siemens SCALANCE X Plug-in accessory SFP992-1BXMT

Binary data 765099.prm...

Siemens SCALANCE X Plug-in accessory SFP991-1ELH200

Binary data 765094.prm...

Siemens SCALANCE X Plug-in accessory SFP992-1LH+

Binary data 765103.prm...

Siemens SCALANCE X Plug-in accessory SFP991-1

Binary data 765090.prm...

Siemens SCALANCE X Plug-in accessory SFP992-1ELH

Binary data 765104.prm...

Siemens SCALANCE X Plug-in accessory SFP991-1LD

Binary data 765095.prm...

Siemens SCALANCE X Plug-in accessory SFP991-1

Binary data 765092.prm...

Siemens SCALANCE X Plug-in accessory SFP992-1BXMR

Binary data 765098.prm...

Siemens SCALANCE X Plug-in accessory SFP992-1LD

Binary data 765100.prm...

Siemens SCALANCE X Plug-in accessory SFP993-1LD

Binary data 765106.prm...

Siemens SCALANCE X Plug-in accessory SFP992-1+

Binary data 765097.prm...

Veeam Availability Orchestrator v2 Patch 1 (build 1463)

Challenge This patch fixes the following issue found in VAO 2.0. The presence of backup job objects created by Veeam plug-in backup jobs cause VAO Restore Plans to fail locating valid restore points required for the restore process. The following example shows the issue found in the Readiness Che...

CVE-2016-10926

The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php...

Cross-site scripting in CLEditor

Premium Software CLEditor 1.4.5 and earlier is affected by: Cross Site Scripting XSS. The impact is: An attacker might be able to inject arbitrary html and script code into the web site. The component is: jQuery plug-in. The attack vector is: the victim must open a crafted href attribute of a lin...

CVE-2019-2791

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

CVE-2019-2791: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...