5806 matches found
Oracle Web Services CVE-2019-2907 Remote Security Vulnerability
Description Oracle Web Services is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'SOAP with Attachments API for Java' component is affected. This vulnerability affects the following supported versions: 12.2.1.3.0 Technologies Affected...
Oracle E-Business Suite cpuoct2019 Multiple Security Vulnerabilities
Description Oracle E-Business Suite is prone to multiple security vulnerabilities in Oracle Marketing. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Marketing Administration' component is affected. These vulnerabilities affect the following supported versions: 12.1.1 throu...
Oracle Business Intelligence Enterprise Edition Multiple Remote Security Vulnerabilities
Description Oracle Business Intelligence Enterprise Edition is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Installation' and 'Analytics Actions' components are affected. These vulnerabilities affect the following support...
Oracle Siebel UI Framework CVE-2019-2935 Remote Security Vulnerability
Description Oracle Siebel UI Framework is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'EAI' component is affected. This vulnerability affects the following supported versions: 19.8 and prior Technologies Affected Oracle Siebel...
Mail.ru: SSRF in clients.city-mobil.ru
Limited non-blind SSRF in clients.city-mobil.ru the report was submitted before the launch of dedicated bug bounty scope for Citymobil Non-blind SSRF in apt-cacher, used for getting software updates, allowing limited requests to internal services...
SUSE-SU-2019:2620-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Updated to new ESR version 68.1 bsc1149323. In addition to the already fixed vulnerabilities released in previous ESR updates, the following were also fixed: CVE-2019-11751, CVE-2019-11736, CVE-2019-9812, CVE-2019-11748, CVE-2019-11749,...
Juniper Junos CVE-2019-0065 Denial of Service Vulnerability
Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. The following versions of Junos on Juniper MX-Series platform are vulnerable: Juniper Junos 16.1 versions prior to 16.1R7-S5 Juniper Junos 16.2 versio...
iTerm2 CVE-2019-9535 Remote Command Execution Vulnerability
Description iTerm2 is prone to a remote command-injection vulnerability Attackers can exploit this issue to execute arbitrary commands on the system. iTerm2 version 3.3.5 and prior versions are vulnerable. Technologies Affected iTerm2 iTerm2 3.0.4 iTerm2 iTerm2 3.1.0 iTerm2 iTerm2 3.1.5 iTerm2...
NetApp SnapManager for Oracle CVE-2019-5507 Unspecified Local Information Disclosure Vulnerability
Description NetApp SnapManager for Oracle is prone to an unspecified local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information or perform unauthorized actions on data. Versions prior to NetApp SnapManager for Oracle 3.4.2P1 are vulnerable...
SAP BusinessObjects Business Intelligence Platform Multiple Cross Site Scripting Vulnerabilities
Description SAP BusinessObjects Business Intelligence Platform is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Remote attackers can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in...
Microsoft Windows IIS Server CVE-2019-1365 Remote Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks may cause denial of service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for 32-b...
Microsoft Edge CVE-2019-1356 Information Disclosure Vulnerability
Description Microsoft Edge is prone to an information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Edge Recommendations Run all software as a nonprivileged user with minimal acce...
Microsoft Edge Chakra Scripting Engine CVE-2019-1366 Remote Memory Corruption Vulnerability
Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...
Microsoft Excel CVE-2019-1327 Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
Sophos Cyberoam Firewall CVE-2019-17059 Remote Code Execution Vulnerability
Description Sophos Cyberoam Firewall is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Sophos CyberoamOS 10.6.6 MR-5 and prior are vulnerable. Technologies Affected Sophos CyberoamOS 10.6.6...
Microsoft SharePoint CVE-2019-1330 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint is prone to a remote privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundati...
Microsoft SharePoint Server CVE-2019-1329 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint...
SAP NetWeaver Process Integration CVE-2019-0367 Remote Authorization Bypass Vulnerability
Description SAP NetWeaver Process Integration is prone to an authorization-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access and obtain sensitive information. This may aid in further attacks. SAP NetWeaver Process Integration versions 1.0 and 2.0 are vulnerable...
PHP 'new COM()' Denial of Service Vulnerability
Description PHP is prone to a denial-of-service vulnerability. Successful exploits may allow the attacker to crash the affected application resulting in denial-of-service condition. Versions prior to PHP 7.4.0 are vulnerable. Technologies Affected PHP PHP 7.3.0 PHP PHP 7.3.1 PHP PHP 7.3.2 PHP PHP...
Multiple Intel NUC Products Multiple Unspecified Local Security Vulnerabilities
Description Multiple Intel NUC Products are prone to multiple unspecified local security vulnerabilities. Local attackers can leverage these issues to gain elevated privileges, cause denial-of-service conditions or obtain sensitive information. The following products of Intel are vulnerable: Inte...