7967 matches found
Buffer overflow
Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2020-6823
A malicious extension could have called browser.identity.launchWebAuthFlow, controlling the redirecturi, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox 75...
MS15-022: Description of the security update for SharePoint Server 2013 and SharePoint Foundation 2013: March 10, 2015
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Microsoft Word file in an affected version of Office.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could...
CVE-2017-18684
An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 software. SVoice allows provider seizure via an application that uses a custom provider. The Samsung ID is SVE-2016-6942 February 2017...
CVE-2017-18684
An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 software. SVoice allows provider seizure via an application that uses a custom provider. The Samsung ID is SVE-2016-6942 February 2017...
Code injection
An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 software. SVoice allows provider seizure via an application that uses a custom provider. The Samsung ID is SVE-2016-6942 February 2017...
CVE-2017-18684
CVE-2017-18684 affects Samsung mobile devices running Lollipop 5.0/5.1 and Marshmallow 6.0 (SVoice). The issue allows a provider seizure via an application that uses a custom provider, as described in the Red Hat and NVD entries. The exact root cause details are not fully disclosed in the provide...
CVE-2017-18684
An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 software. SVoice allows provider seizure via an application that uses a custom provider. The Samsung ID is SVE-2016-6942 February 2017...
CVE-2020-6823
A malicious extension could have called browser.identity.launchWebAuthFlow, controlling the redirecturi, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox 75...
How to Customize the VSPC Welcome Email
Article Applicability This article is relevant only to Veeam Service Provider Console 9.2 and older. Starting in Veeam Service Provider Console 9.3, the email template model has been changed and can no longer be customized as described in this article. Purpose This article documents how to...
CVE-2019-17564
Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance of Apache Dubbo, if this instance enables HTTP. This issue affected Apache Dubbo 2.7.0 to 2.7.4,...
DEBIAN-CVE-2020-10968
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider aka bus-proxy...
UBUNTU-CVE-2020-10968
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider aka bus-proxy...
Getting Insights into the Delivery Path of Media with Breadcrumbs
Problem Definition Media streaming typically involves three main components: a player, the origin, and a CDN. Typically, the content provider owns the player and the origin stack and hence is able to diagnose and troubleshoot issues, but the CDN for the most part is a black box. The player...
Samsung Mobile Device SQL Injection Vulnerability (CNVD-2020-31554)
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A SQL injection vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to access the Content Provider's database...
Veeam Agent backup job configuration fails with "Xml node is not found. Name: [lsObjectRepository]."
Challenge When configuring a Veeam Agent job to target a Veeam Cloud Connect repository, at the Credentials step of the configuration wizard, the following error occurs: Failed to get Cloud Connect repositories, Failed to retrieve the list of available cloud resources from the service provider. X...
CVE-2019-20591
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the Gear VR Service Content Provider. The Samsung ID is SVE-2019-14058 July 2019...
CVE-2019-20592
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the Story Video Editor Content Provider. The Samsung ID is SVE-2019-14062 July 2019...