CVE-2018-3312

Vulnerability in the Oracle Retail Customer Engagement component of Oracle Retail Applications subcomponent: Segment. Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Retail...

UBUNTU-CVE-2019-2696

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-12173)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Security: Privileges subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.15 and...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-10376)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: DDL subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.15 and earlier. An attacke...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-14568)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Security: Privileges subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.15 and...

Oracle Retail Applications Retail Customer Engagement Access Control Error Vulnerability

Oracle Retail Applications is a suite of retail applications store solutions from Oracle Corporation. The product includes inventory management, sales management and customer management, etc. Retail Customer Engagement is one of the retailer customer engagement components, mainly used to interact...

PT-2019-1922 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.15 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Optimizer subsystem. This can be exploited by a remote attacker to cause a denial of...

PT-2019-1996 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.15 and prior Description: The issue is related to inadequate access control in the InnoDB component of the MySQL database management system. It allows a remote attacker with high privileges and network access via...

Sophos IPSec Client Access Control Error Vulnerability

Sophos IPSec Client is a VPN client application. An access control error vulnerability exists in Sophos IPSec Client version 11.04 NCPSecure Entry Client version 10.11 r32792. The vulnerability arises from the network system or product not properly restricting access to resources from unauthorize...

Adobe Bridge CC Out-of-Bounds Write Vulnerability

Adobe Bridge is a free digital asset management application from Adobe. An out-of-bounds write vulnerability exists in Adobe Bridge CC 9.0.2. An attacker can exploit this vulnerability to achieve remote code execution...

PT-2019-10045 · Rancher · Rancher

Name of the Vulnerable Software and Affected Versions: Rancher versions 2.0.0 through 2.1.5 Description: An issue allows project members with access to the default namespace to execute administrative privileged commands against the k8s cluster by mounting the netes-default service account in a po...

Adobe Bridge CC Memory Misreference Vulnerability

Adobe Bridge is a free digital asset management application from Adobe. A memory misreference vulnerability exists in Adobe Bridge CC 9.0.2. An attacker could exploit the vulnerability to obtain information...

CVE-2019-4080

IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380...

SQL Injection Vulnerability in MKCMS Version 5.0 ac***.php Page

MKCMS is a content management system. A SQL injection vulnerability exists in the ac.php page of MKCMS version 5.0, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in MKCMS 5.0

MKCMS is a content management system. A SQL injection vulnerability exists in MKCMS version 5.0, which can be exploited by attackers to obtain sensitive database information...

CVE-2018-19509

wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars instead of using a templating engine with proper contextual encoding. Because it is possible to insert arbitrary strings into the database, any JavaScript could be executed by the administrator, leading to XSS...

CVE-2018-19510

subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header...

Moderate: Red Hat Bug Fix Advisory: Red Hat OpenStack Platform 13.0 director Bug Fix Advisory

Updated director installer packages that resolve various issues are now available for Red Hat OpenStack Platform 13.0 Queens for RHEL 7. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud running on...

MKCMS v5.0 has an xss vulnerability

MKCMS is a content management system. MKCMS v5.0 suffers from an xss vulnerability that can be exploited by attackers to obtain an administrator cookie...

GHSA-2MVM-66Q7-M256 Downloads Resources over HTTP in selenium-download

Affected versions of selenium-download insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...