Design/Logic Flaw

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6 - 8.0.8. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2020-2938

CVE-2020-2938 affects Oracle Financial Services Applications Loan Loss Forecasting and Provisioning (UI) for 8.0.6–8.0.8. A low-privileged, network-accessible attacker via HTTP can cause unauthorized create/delete/modify of data and read access to sensitive data. CVSSv3.1 base score 7.1 (HIGH); c...

Update fixes issues and adds support to MDM clients in Windows RT 8.1 and Windows 8.1

Update fixes issues and adds support to MDM clients in Windows RT 8.1 and Windows 8.1 Introduction This article describes a Mobile Device Manager MDM client update for Windows RT 8.1 and Windows 8.1. This update contains the following improvements and fixes the following issues. Improvement 1 The...

libosinfo security update

CentOS Errata and Security Advisory CESA-2020:1051 An update for libosinfo is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Privilege escalation

Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3...

Low: Red Hat Security Advisory: libosinfo security and bug fix update

An update for libosinfo is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

The vulnerability of the Provisioning Runtime component in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Provisioning Runtime component in Windows operating systems is related to errors in file operation handling. Exploiting this vulnerability can allow an attacker to gain increased privileges by executing non-privileged code on the target system...

Simplifying the ISP Transition to DNS Encryption

New protocols to encrypt DNS traffic, DNS over HTTPS DoH and DNS over TLS DoT, have been a visible Internet topic for the past two years. Akamai participated in the definition of DoH/DoT standards and recently released support in the high-performance CacheServe resolver. Major features include:...

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting...

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

Cisco Prime Collaboration Provisioning Information Disclosure (cisco-sa-prim-collab-disclo-FAnX4DKB)

According to its self-reported version, Cisco Prime Collaboration Provisioning is affected by an information disclosure vulnerability in the web-based management interface because replies from the web-based management interface include unnecessary server information. An unauthenticated, remote...

Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability (cisco-sa-prime-collab-xss-RjRCe9n7)

According to its self-reported version, Cisco Prime Collaboration Provisioning is affected by a cross-site scripting vulnerability in the web-based management interface due to insufficient validation of user-supplied input. An unauthenticated, remote attacker could exploit this by persuading a us...

CVE-2020-0808

An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning Runtime Elevation of Privilege Vulnerability'...

CVE-2020-0808

An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning Runtime Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning Runtime Elevation of Privilege Vulnerability'...

CVE-2020-0808

CVE-2020-0808 describes an elevation of privilege vulnerability in the way the Provisioning Runtime validates certain file operations. The connected documents reiterate this description but do not specify affected products, versions, root cause details, impact metrics, exploit status, or availabl...

CVE-2020-0808

An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations, aka 'Provisioning Runtime Elevation of Privilege Vulnerability'...

Provisioning Runtime Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged co...

KB4540689: Windows 10 Version 1803 March 2020 Security Update

The remote Windows host is missing security update 4540689. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully exploited this vulnerability...

KB4538461: Windows 10 Version 1809 and Windows Server 2019 March 2020 Security Update

The remote Windows host is missing security update 4538461. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations. An attacker who successfully exploited this vulnerability...