The vulnerability of the Linux systemd initialization process, related to the access to memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux systemd initialization process is related to an error in the handling of the queue after it is freed from memory. Asynchronous Polkit requests are executed when processing dbus messages. Exploiting this vulnerability allows an attacker to gain access to confidential...

CVE-2020-4267

IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak. IBM X-Force ID: 175840...

Security Bulletin: IBM MQ Appliance is vulnerable to a denial of service attack caused by an authenticated user crafting a malicious message (CVE-2019-4656)

Summary IBM MQ Appliance is vulnerable to a denial of service attack that would allow an authenticated user to craft a malicious message causing a queue manager to incorrectly mark a queue as damaged, requiring a restart to continue processing against the queue. Vulnerability Details CVEID:...

The vulnerability of the HandleCursorShape function in the LibVNC library, which allows a hacker to execute arbitrary code.

The vulnerability of the HandleCursorShape function in the LibVNC library is related to buffer overflow in the queue. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Malicious Package

Overview alephantpublisher-queue is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

CVE-2019-4762

IBM MQ 9.0 and 9.1 is vulnerable to a denial of service attack due to an error in the Channel processing function. IBM X-Force ID: 173625...

CVE-2020-4338

IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. IBM X-Force ID: 177937...

Unspecified Vulnerability in Oracle E-Business Suite Universal Work Queue

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Universal Work Queue is one of the tools that c...

CVE-2020-2819

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2818

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2818

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Buffer overflow

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2818

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2818

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-2818

CVE-2020-2818 affects Oracle E-Business Suite’s Oracle Universal Work Queue (Work Provider Administration) for versions 12.1.1–12.1.3. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise the Work Queue, with attacks requiring user interaction. Impact i...

CVE-2020-2819

CVE-2020-2819 affects Oracle E-Business Suite Universal Work Queue (component: Work Provider Administration) and multiple supported versions (12.1.1–12.1.3). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Universal Work Queue; successful attack...

CVE-2020-2819

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

HTTP/2: flood using SETTINGS frames results in unbounded memory growth

A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

Print job fails if Creator Owner is removed from Windows Server 2012 R2 or Windows Server 2012

Print job fails if Creator Owner is removed from Windows Server 2012 R2 or Windows Server 2012 This article describes an issue that occurs when a client computer connects to the print queue and tries to print a file in Windows Server 2012 R2 or Windows Server 2012. You can fix this issue by using...

CVE-2020-4290

IBM Security Information Queue ISIQ 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333...