WordPress WP User Groups 2.0.0 Cross Site Request Forgery

Details ================ Software: WP User Groups Version: 2.0.0 Homepage: https://wordpress.org/plugins/wp-user-groups/ Advisory report: https://advisories.dxw.com/advisories/csrf-wp-user-groups/ CVE: Awaiting assignment CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:P/A:N Description ================...

HPESBHF03841 rev.2 - Certain HPE Servers with AMD-based Processors, Multiple Vulnerabilities (Fallout/Masterkey)

Potential Security Impact: Local: Denial of Service DoS, Unauthorized Disclosure of Information, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL385 Gen10 Server - Prior to 1.2204-16-201823 Apr 2018 - AMD Processor, Fallout HPE Cloudline...

CVE-2018-1389

IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a Model using the BelongsTo/HasMany relationship allowing unauthorized modification of information. IBM X-Force ID: 138213...

Design/Logic Flaw

IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a Model using the BelongsTo/HasMany relationship allowing unauthorized modification of information. IBM X-Force ID: 138213...

CVE-2018-1389

IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a Model using the BelongsTo/HasMany relationship allowing unauthorized modification of information. IBM X-Force ID: 138213...

CVE-2018-1389

IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a Model using the BelongsTo/HasMany relationship allowing unauthorized modification of information. IBM X-Force ID: 138213...

PT-2018-12249

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 5.0.0.0 through 5.0.8.2 Description The issue allows unauthorized modification of information due to generated LoopBack APIs for a Model using the BelongsTo/HasMany relationship. Recommendations For versions 5.0.0.0...

CVE-2018-1389: Undefined Security Weakness

IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a Model using the BelongsTo/HasMany relationship allowing unauthorized modification of information. IBM X-Force ID: 138213...

CVE-2018-2791

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2018-4148

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue concerns binary Calibration files under data/misc/audio, which have 777 permissions. This could potentially allow unauthorized access or modification of these file...

PT-2018-15538

Name of the Vulnerable Software and Affected Versions SAP Cloud Platform version 2.0 Description The issue concerns improper session management in SAP Cloud Platform 2.0, specifically affecting the Connectivity Service and Cloud Connector. This can lead to unauthorized access to or modification o...

UBUNTU-CVE-2016-9575

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...

HPESBUX03817 rev.2 - HP-UX CIFS Server, Local and Remote Vulnerabilities

Potential Security Impact: Local: Unauthorized Data Access; Remote: Disclosure of Information, Unauthorized Data Access, Unauthorized Modification Of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Common Internet File System CIFS, Client/Server Software...

CloudBees Jenkins Dependency Graph Viewer plugin unauthorized modification vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Dependency Graph Viewer is used in o...

CVE-2018-2713

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware subcomponent: WebCenter Spaces Application. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

PT-2018-15668

Name of the Vulnerable Software and Affected Versions Primavera Unifier versions 10.x through 17.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks can result in unauthorized creation, deletion, or modification...

PT-2018-15721

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Profitability Management versions 6.1.x through 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Profitability Management. Successful...

PT-2018-15762

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Asset Liability Management versions 6.1.x through 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Asset Liability Management. Successfu...

PT-2018-15765

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Market Risk version 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Market Risk, resulting in unauthorized creation, deletion, or...

PT-2018-15763

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Loan Loss Forecasting and Provisioning version 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Loan Loss Forecasting and Provisioning...