CVE-2019-8988

The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site contains a vulnerability that theoretically allows a user to escalate their privileges on the affected system, in a way that may allow for data...

The vulnerability of the Reflect.construct processing mechanism in the V8 JavaScript script handler of Google Chrome browser allows a perpetrator to gain unauthorized access to information.

The vulnerability of the Reflect.construct processing mechanism in Google Chrome’s JavaScript scripting engine is related to memory-walking attacks. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information through a specially crafted HTML page...

Joomla Geommunity3es 1.4 SQL Injection

Exploit Title : Joomla Geommunity3es Components 1.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : nordmograph.com Software Download Link : nordmograph.com/extensions /index.php?option=comvirtuemart&view=productdetails...

The vulnerability of the rfbproto.c component of the cross-platform library LibVNCServer, related to writing beyond buffer boundaries in memory, allows a perpetrator to cause a service failure and gain unauthorized access to confidential data.

The vulnerability of the rfbproto.c component of the cross-platform library LibVNCServer is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures and gain unauthorized access to confidential data...

The vulnerability of the rfbserver.c component of the cross-platform library LibVNCServer, related to writing beyond buffer boundaries in memory, allows a hacker to trigger a service failure and gain unauthorized access to confidential data.

The vulnerability of the rfbserver.c component of the cross-platform library LibVNCServer is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and gain unauthorized access to confidential data...

The vulnerability of the WebCenter Spaces Application component of the Oracle WebCenter Portal web platform, which allows a intruder to gain unauthorized access to protected data

The vulnerability of the WebCenter Spaces Application web platform’s Oracle WebCenter Portal relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

The vulnerability of the Application Portal component of the PeopleSoft Enterprise Interaction Hub software solution allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Application Portal component of the PeopleSoft Enterprise Interaction Hub software solution is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the...

The vulnerability of the WebCenter Spaces Application component of the Oracle WebCenter Portal web platform, which allows a intruder to gain unauthorized access to data.

The vulnerability of the WebCenter Spaces Application component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data using the HTTP protocol...

The vulnerability of the LFTP component in the Oracle Solaris operating system, which allows a intruder to gain unauthorized access to data.

The vulnerability of the LFTP component in the Oracle Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to data using the FTP protocol...

The vulnerability of the Performance Monitor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to data.

The vulnerability of the Performance Monitor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to data using the HTTP protocol...

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to data.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to data using the HTTP protocol...

phpMyVisites CNTNT Templates 2.4 SQL Injection

Exploit Title : phpMyVisites CNTNT Templates 2.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : phpmyvisites.net Software Download Link : phpmyvisites.net/telechargements.html Software Information Link :...

The vulnerability of the WLS component – the Web Services server of Oracle WebLogic Server – allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the WLS component—the Web Services server of Oracle WebLogic Server—is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

The vulnerability of the Workflow component of the Oracle PeopleSoft Enterprise PeopleTools business application package allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Workflow component of the Oracle PeopleSoft Enterprise PeopleTools business application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP...

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application allows a hacker to gain unauthorized access to protected data.

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using th...

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service allows a intruder to gain unauthorized access to data.

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data using the HTTP protocol...

The vulnerability of the Web Access component of the Oracle Primavera Unifier application, which allows a hacker to gain unauthorized access to data.

The vulnerability of the Web Access component of the Oracle Primavera Unifier application, which is used for automating project management processes, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...

Joomla ExtCalendar 2.0 SQL Injection

Exploit Title : Joomla ExtCalendar 2.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/02/2019 Vendor Homepage : sourceforge.net/projects/extcal/ - github.com/simoami Software Download Link : sourceforge.net/projects/extcal/files/latest/download...

The vulnerability of the astra-safepolicy utility in the Astra Linux operating system allows a perpetrator to gain access to confidential data and unauthorizedly execute the command interpreter.

The vulnerability of the astra-safepolicy utility in the Astra Linux operating system is related to a flaw that causes no cleanup of the environment during the execution of interpreters, and it also allows for bypassing restrictions on the execution of these interpreters by unauthorized users...

The vulnerability of the Support Cart component of the Oracle Applications Manager, a system for automating business operations within the Oracle E-Business Suite. This vulnerability allows an attacker to gain unauthorized access to protected data.

The vulnerability of the Support Cart component in the Oracle Applications Manager application management tool, part of the Oracle E-Business Suite, is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...