CVE-2019-19306

The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName...

Secondary storage backup stops working after NetApp MetroCluster switchover

Challenge After the MetroCluster switchover a backup job with the SnapVault or SnapMirror specified on the Secondary Target tab cannot update these relationships. Cause Unfortunately this is a bug in the OnTap Data Management software. In the event of a switchover Veeam Backup&Replication cannot...

The vulnerability of the Access and Security sub-component of the Hyperion Data Relationship Management application, which is used for data management in the Oracle Hyperion business environment, allows a perpetrator to cause a service failure, execute arbitrary code, or gain unauthorized access to protected information.

The vulnerability of the Access and Security sub-component of the Hyperion Data Relationship Management component of the Oracle Hyperion application for business data management is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service...

Low: unzip

Issue Overview: Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.CVE-2018-18384 Affected Packages: unzip Note: This advisory is...

Dolibarr ERP/CRM Injection Vulnerability

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. An injection vulnerability exists in Dolibarr ERP/CRM version...

Missing HOST SPN can cause workstation trust relationship error

User or admin is unable to login to a computer remotely using a domain account and sees this error: "The security database on the server does not have a computer account for this workstation trust relationship."...

Linux Polkit pkexec Helper PTRACE_TRACEME Local Root

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux Polkit pkexec helper PTRACETRACEME local root exploit', 'Description' = %q This module exploits an issue in ptracelink in kernel/ptrace.c...

CVE-2019-2927

Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Data...

CVE-2019-2927

Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Data...

Design/Logic Flaw

Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Data...

CVE-2019-2927

Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Data...

CVE-2019-2927

Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Data...

CVE-2019-2927

CVE-2019-2927 concerns Oracle Hyperion Data Relationship Management (component: Access and Security). Affected product/version: Hyperion DRM 11.1.2.4. The issue is exploitable over HTTP with network access by a high-privilege attacker; user interaction is required for successful exploitation and ...

Unspecified Vulnerability in Oracle Hyperion Hyperion Data Relationship Management Component (CNVD-2019-38820)

Oracle Hyperion is a set of financial modeling applications from Oracle Corporation. The software provides financial closure, report production and other functions.Hyperion Data Relationship Management is one of the data relationship management components. An unspecified vulnerability exists in t...

CVE-2019-2927: Undefined Security Weakness

Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Data...

NewStart CGSL CORE 5.04 / MAIN 5.04 : unzip Vulnerability (NS-SA-2019-0192)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has unzip packages installed that are affected by a vulnerability: - Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size...

Oracle Hyperion Data Relationship Management CVE-2019-2927 Remote Security Vulnerability

Description Oracle Hyperion Data Relationship Management is prone to a remote security vulnerability. The vulnerability can be exploited over HTTP protocol. This issue affects the 'Access and Security' component. This vulnerability affects the following supported versions: 11.1.2.4 Technologies...

CISO and Security Vendor Relationships are Good for a Laugh in New Comic Videos

It’s not easy being a CISO. One could say “intense” might be the perfect descriptor for the CISO work environment. Tasked with the unenviable job of keeping the organization safe, carrying the burden of failed protection and taking hits for successful breaches, CISOs can never rest. They are...

CVE-2019-0368: Improper Neutralization of Input During Web Page Generation

SAP Customer Relationship Management Email Management, versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability...

CVE-2019-0361

SAP Supplier Relationship Management Master Data Management Catalog - SRMMDMCAT, before versions 3.73, 7.31, 7.32 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...