About the security content of iOS 14.2 and iPadOS 14.2

About the security content of iOS 14.2 and iPadOS 14.2 This document describes the security content of iOS 14.2 and iPadOS 14.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

The vulnerability of the Oracle Application Express Data Reporter component of the Oracle Database Server database management system allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Oracle Application Express Data Reporter component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected...

Elevation of Privilege Vulnerability in Crash Reporter Component of Multiple Apple Products

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. tvOS is an operating system for smart TVs. An elevation of privilege vulnerability exists in the Crash Reporter component in Apple iOS before 13.6, iPadOS before 13.6, tvOS before 13.4....

Micro Focus Operations Bridge Manager / Reporter Local Privilege Escalation

This module exploits an incorrectly permissioned folder in Micro Focus Operations Bridge Manager and Operations Bridge Reporter. An unprivileged user such as Guest can drop a JSP file in an exploded WAR directory and then access it without authentication by making a request to the OBM / OBR serve...

Oracle Application Express Data Reporter component privilege acquisition vulnerability

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A privilege acquisition vulnerability exists in Oracle Application Express Data Reporte...

CVE-2020-14899

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromis...

CVE-2020-14899

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromis...

CVE-2020-14899

CVE-2020-14899 affects the Oracle Application Express Data Reporter component of Oracle Database Server (pre-20.2). The issue is exploitable by a low-privilege user with a valid account, via HTTP, and requires user interaction. An attacker can modify and delete data and also obtain unauthorized r...

CVE-2020-14899

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromis...

classifieds.fdlreporter.com Cross Site Scripting vulnerability OBB-1419302

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

rentonreporter.com Improper Access Control vulnerability OBB-1395289

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

abb.mexicored.com.mx Cross Site Scripting vulnerability OBB-1390778

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

oilersnation.com Improper Access Control vulnerability OBB-1380056

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Micro Focus Operations Bridge Reporter Authorization Bypass Vulnerability (CNVD-2020-53524)

Micro Focus Operations Bridge Reporter is an IT reporting software that provides resource, incident, and response time reports across server, network, and application environments. An authorization bypass vulnerability exists in Micro Focus Operations Bridge Reporter versions 10.40 and earlier,...

Micro Focus Operations Bridge Reporter HPE-OBR Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Micro Focus Operations Bridge Reporter. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...

Micro Focus Operations Bridge Reporter Arbitrary Code Execution Vulnerability

Micro Focus Operations Bridge Reporter is an IT reporting software that provides resource, incident, and response time reports across server, network, and application environments. An arbitrary code execution vulnerability exists in Micro Focus Operations Bridge Reporter version 10.40 and earlier...

Micro Focus Operations Bridge Reporter JMX Missing Authentication Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Reporter. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the JMX remote interface. This interface...

Micro Focus Operations Bridge Reporter Authorization Bypass Vulnerability

Micro Focus Operations Bridge Reporter is an IT reporting software that provides resource, incident, and response time reports across server, network, and application environments. An authorization bypass vulnerability exists in Micro Focus Operations Bridge Reporter version 10.40 and earlier. A...

Micro Focus Operations Bridge Reporter shrboadmin Use of Hard-coded Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Reporter. Authentication is not required to exploit this vulnerability. The specific flaw exists within the creation of the shrboadmin user during installation. The...

CVE-2020-11856

Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of OBR...