CVE-2019-2679: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2579: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2019-2610: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2019-16439

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management version 18.8 Description The issue affects the Web Access subcomponent, allowing a low-privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfoli...

CVE-2019-2582: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 18c. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability ca...

CVE-2019-2720: Undefined Security Weakness

Vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware subcomponent: ODI Tools. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data...

CVE-2019-8999

An XML External Entity vulnerability in the UEM Core of BlackBerry UEM versions earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account...

Xxe

An XML External Entity vulnerability in the UEM Core of BlackBerry UEM versions earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account...

CVE-2019-8999

An XML External Entity vulnerability in the UEM Core of BlackBerry UEM versions earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account...

PT-2019-19302

Name of the Vulnerable Software and Affected Versions BlackBerry UEM versions prior to 12.10.1a Description The issue is related to an XML External Entity vulnerability in the UEM Core. This could potentially allow an attacker to gain read access to files on any system reachable by the UEM servic...

Security update for tar (moderate)

openSUSE Security Update: Security update for tar Announcement ID: openSUSE-SU-2019:1237-1 Rating: moderate References: 1120610 1130496 Cross-References: CVE-2018-20482 CVE-2019-9923 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description: This...

PT-2019-1937

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to insufficient access controls in the Outside In Filters subcomponent of Oracle Outside In Technology, a suite of software development kits SDKs. This...

Microsoft Windows 10 1809 - LUAFV Delayed Virtualization MAXIMUM_ACCESS DesiredAccess Privilege Escalation

Microsoft Windows 10 1809 - LUAFV Delayed Virtualization MAXIMUMACCESS DesiredAccess Privilege Escalation Windows: LUAFV Delayed Virtualization MAXIMUMACCESS DesiredAccess EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service...

PT-2019-1942

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient access control in the Web Catalog subcomponent of Oracle Business Intelligence Enterprise Edition,...

PT-2019-2014

Name of the Vulnerable Software and Affected Versions Oracle AutoVue 3D Professional Advanced versions 21.0.0 through 21.0.1 Description The issue is related to inadequate access control in the Format Handling - 2D subcomponent of Oracle AutoVue 3D Professional Advanced, allowing an unauthenticat...

PT-2019-1938

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to insufficient access controls in the Outside In Filters subcomponent of Oracle Outside In Technology, a software development kit SDK. This can be...

PT-2019-2017

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite version 11.1.1.9.0 Description The issue is related to inadequate access control in the Fabric Layer subcomponent of Oracle SOA Suite, allowing an unauthenticated attacker with network access via HTTP to compromise the system...

PT-2019-1877

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.28 Oracle VM VirtualBox versions prior to 6.0.6 Description The issue is related to inadequate access control in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with log...

PT-2019-1935

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to insufficient access controls in the Outside In Filters subcomponent of Oracle Outside In Technology, a suite of software development kits SDKs. This...

PT-2019-1936

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to insufficient access controls in the Outside In Filters subcomponent of Oracle Outside In Technology, a suite of software development kits SDKs. This...