PT-2018-2363

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.4 Description The issue is related to insufficient access control in the Hyperion Common Events component, specifically in the User Interface subcomponent. It allows an unauthenticated attacker with network acce...

PT-2018-2479

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Oracle PeopleSoft Products version 8.57 Description The issue is related to insufficient access control in the Stylesheet component of Oracle PeopleSoft Enterprise...

PT-2018-2430

Name of the Vulnerable Software and Affected Versions Oracle Virtual Directory versions 11.1.1.7.0 through 11.1.1.9.0 Description The issue is related to insufficient access control in the Virtual Directory Manager component of Oracle Virtual Directory, allowing a low-privileged attacker with...

PT-2018-2372

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55 through 8.56 Description The issue is related to inadequate access control in the PIA Core Technology component of Oracle PeopleSoft Products. It allows an unauthenticated attacker with network...

PT-2018-2429

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.23 and prior MySQL Server versions 8.0.12 and prior Description The issue is related to inadequate access control in the MySQL Server component of Oracle MySQL, specifically in the Server: Partition subcomponent. This...

PT-2018-2243

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.0 Description The issue is related to inadequate access control in the Oracle Hospitality Reporting and Analytics component, allowing a low-privileged attacker with network access via HTTP t...

PT-2018-2355

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 8.55 Oracle PeopleSoft Products version 8.56 Description The issue is related to a vulnerability in the Rich Text Editor component of Oracle PeopleSoft Products, which can be exploited by an unauthenticated...

PT-2018-2238

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue is related to inadequate access control in the Oracle Applications Manager component of Oracle E-Business Suite. This can be exploited by a...

PT-2018-2357

Name of the Vulnerable Software and Affected Versions Oracle Construction and Engineering Suite Primavera Unifier component versions 15.1, 15.2, 16.1, 16.2, 17.1 through 17.12, and 18.1 through 18.8 Description The issue is related to inadequate access control in the Primavera Unifier component,...

PT-2018-2244

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 11.3 Description The issue is related to a vulnerability in the Remote Administration Daemon RAD component of the Solaris operating system, which is part of the Oracle Sun Systems Products Suite. This...

PT-2018-2373

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 through 17.12, 18.8 Description The issue is related to inadequate access control in the Web Access component, allowing an unauthenticated attacker...

PT-2018-2393

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue is related to insufficient access control in the Oracle User Management component, allowing a high-privileged attacker with network access vi...

PT-2018-2379

Name of the Vulnerable Software and Affected Versions Java SE versions 6u201, 7u191, 8u182 and 11 Java SE Embedded version 8u181 JRockit version R28.3.19 Description The issue is related to inadequate access control in the JSSE component of Oracle Java SE, allowing an unauthenticated attacker wit...

PT-2018-2239

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.7 Description The issue is related to inadequate access control in the Oracle Marketing component, specifically the Marketing...

PT-2018-2312

Name of the Vulnerable Software and Affected Versions Oracle Retail Applications MICROS Retail-J versions 12.1.2 and 13.0.0 Description The issue is related to inadequate access control in the Back Office component of MICROS Retail-J, allowing an unauthenticated attacker with network access via...

MGASA-2018-0359 Updated mariadb packages fix security vulnerability

Updated mariadb packages fix security vulnerabilities: Vulnerability in the MariaDB Server component of MariaDB subcomponent: MyISAM. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful attacks of this...

CVE-2018-11055

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 in 4.0.x and prior to 4.1.6.1 in 4.1.x, contains an Improper Clearing of Heap Memory Before Release 'Heap Inspection' vulnerability. Decoded PKCS 12 data in heap memory is not zeroized by MES before releasing the memory internally and a...

CVE-2018-11055: Improper Resource Shutdown or Release

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 in 4.0.x and prior to 4.1.6.1 in 4.1.x, contains an Improper Clearing of Heap Memory Before Release 'Heap Inspection' vulnerability. Decoded PKCS 12 data in heap memory is not zeroized by MES before releasing the memory internally and a...

CVE-2018-8028: Missing Authorization

An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry protected table...

The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) relates to the disclosure of information, allowing a intruder to gain unauthorized access to protected data.

The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router NWL-25 relates to the disclosure of information through the reading of directory files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...