CVE-2018-14860

Improper sanitization of dynamic user expressions in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated privileged users to escape from the dynamic expression sandbox and execute arbitrary code on the hosting system...

IBM Robotic Process Automation with Automation Anywhere Information Disclosure Vulnerability (CNVD-2019-20993)

IBM Robotic Process Automation with Automation Anywhere is a suite of process automation solutions from IBM USA. An information disclosure vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0. An attacker could exploit this vulnerability to obtain email...

IBM Robotic Process Automation with Automation Anywhere Information Disclosure Vulnerability (CNVD-2019-20991)

IBM Robotic Process Automation with Automation Anywhere is a suite of process automation solutions from IBM USA. A security vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 11.0. An attacker could exploit the vulnerability to obtain highly sensitive...

IBM Robotic Process Automation with Automation Anywhere LDAP Injection Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. An LDAP injection vulnerability exists in IBM Robotic Process Automation with Automation Anywhere 11.0. A remote authenticated attacker could exploit this...

CVE-2019-9702

Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels...

PT-2019-17038 · Automation Anywhere +1 · Automation Anywhere +1

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation with Automation Anywhere version 11 Description: The issue is related to an inadequate account lockout setting, which could allow a remote attacker to brute force account credentials. Recommendations: For IBM...

PT-2019-17039 · Automation Anywhere +1 · Automation Anywhere +1

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation with Automation Anywhere version 11 Description: The issue is related to missing authentication in Ignite nodes, which could allow an attacker to obtain sensitive information. Recommendations: For IBM Robotic...

PT-2019-17019 · Automation Anywhere +1 · Automation Anywhere +1

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation with Automation Anywhere version 11 Description: The issue allows an attacker with specialized access to obtain highly sensitive information from the credential vault. Recommendations: For IBM Robotic Process...

McAfee Enterprise Security Manager Privilege Permission and Access Control Issues Vulnerability

McAfee Enterprise Security Manager ESM is a suite of security information and event management SIEM solutions from McAfee, USA. The solution supports viewing and analyzing threat intelligence as well as rapid threat prioritization and security response, and has a built-in embedded compliance...

Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability (CNVD-2019-39701)

Cisco Enterprise Chat and Email CEC is a suite of enterprise chat and email solutions from Cisco. The product mainly for other Cisco solutions to provide e-mail, chat and Web callback capabilities. A cross-site scripting vulnerability exists in the Web-based management interface in Cisco ECE Cent...

CVE-2019-2704

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: IPS Package Manager. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successfu...

CVE-2018-3314

Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications subcomponent: Customer. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Relate CRM Software...

Sophos IPSec Client Access Control Error Vulnerability

Sophos IPSec Client is a VPN client application. An access control error vulnerability exists in Sophos IPSec Client version 11.04 NCPSecure Entry Client version 10.11 r32792. The vulnerability arises from the network system or product not properly restricting access to resources from unauthorize...

CVE-2018-4327

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1...

Micro Focus Solutions Business Manager Information Disclosure Vulnerability (CNVD-2019-22612)

Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. An information...

CVE-2018-19642

Denial of service issue in Micro Focus Solutions Business Manager SBM formerly Serena Business Manager SBM versions prior to 11.5...

FlexNet Publisher Denial of Service Vulnerability (CNVD-2019-08559)

Flexera Software FlexNet Publisher FLEXlm is the core software license management component of the Entitlement Relationship Management Solution from Flexera Software. The product provides software and hardware manufacturers with the ability to price, package and customize software license terms. ...

CVE-2018-12187

Insufficient input validation in IntelR Active Management Technology IntelR AMT before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access...

CVE-2018-19645

An Authentication Bypass issue exists in Solutions Business Manager SBM formerly Serena Business Manager SBM versions prior to 11.5...

CVE-2018-1977

IBM DB2 for Linux, UNIX and Windows 11.1 includes DB2 Connect Server contains a denial of service vulnerability. A remote, authenticated DB2 user could exploit this vulnerability by issuing a specially-crafted SELECT statement with TRUNCATE function. IBM X-Force ID: 154032...