CVE-2018-16959

An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is delivered with an insecure default User Profile community configuration that allows anonymous users to retrieve the account names of all portal users via /portal/server.pt/user/user/ requests. When WCI ...

CVE-2018-16959

An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is delivered with an insecure default User Profile community configuration that allows anonymous users to retrieve the account names of all portal users via /portal/server.pt/user/user/ requests. When WCI ...

Design/Logic Flaw

An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is delivered with an insecure default User Profile community configuration that allows anonymous users to retrieve the account names of all portal users via /portal/server.pt/user/user/ requests. When WCI ...

CVE-2018-16959

An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is delivered with an insecure default User Profile community configuration that allows anonymous users to retrieve the account names of all portal users via /portal/server.pt/user/user/ requests. When WCI ...

CVE-2018-16959

An observed vulnerability in Oracle WebCenter Interaction Portal 10.3.3 arises from an insecure default User Profile configuration in the portal component. This allows anonymous users to retrieve the account names of portal users via /portal/server.pt/user/user/ requests. When WebCenter Interacti...

GHSA-7PHJ-GMGX-2R66 Moderate severity vulnerability that affects activerecord

Withdrawn, accidental duplicate publish. activerecord/lib/activerecord/nestedattributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly implement a certain destroy option,...

GHSA-35C4-F3RQ-F9G3 Moderate severity vulnerability that affects activesupport

Withdrawn, accidental duplicate publish. The 1 jdom.rb and 2 rexml.rb components in Active Support in Ruby on Rails before 4.1.11 and 4.2.x before 4.2.2, when JDOM or REXML is enabled, allow remote attackers to cause a denial of service SystemStackError via a large XML document depth...

GHSA-V543-GQHH-6GWW Duplicate Advisory: Moderate severity vulnerability that affects activemodel

Duplicate advisory This advisory has been withdrawn because it is a duplicate of GHSA-543v-gj2c-r3ch. This link is maintained to preserve external references. Original Description Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the...

CyberChef - The Cyber Swiss Army Knife [A Web App For Encryption, Encoding, Compression And Data Analysis]

The Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR or Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps, compression an...

Intel CSME AMT Buffer Overflow Vulnerability

Intel CSME is a converged security management engine from Intel Corporation, U.S.A. Intel AMT is one of the active management technology modules. A buffer overflow vulnerability exists in Intel AMT in Intel CSME firmware versions prior to 12.0.5. A local attacker can exploit this vulnerability wi...

Unspecified Vulnerability in Intel Active Management Technology

Intel Active Management Technology AMT is an embedded system from the U.S. company Intel Intel that is integrated into the Intel chip and uses active management technology. A security vulnerability exists in the TLS implementation in Intel AMT versions prior to 12.0.5. An attacker could exploit t...

Intel Active Management Technology Multiple Vulnerabilities (INTEL-SA-00141)

Multiple vulnerabilities in Intel Active Management Technology AMT in Intel CSME firmware may allow arbitrary code execution, a partial denial of service DoS or information disclosure. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

CVE-2018-3616

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network...

CVE-2018-3657

Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbitrary code with Intel AMT execution privilege via local access...

Design/Logic Flaw

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network...

CVE-2018-3616

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network...

PT-2018-1597 · Intel · Intel Active Management Technology +2

Name of the Vulnerable Software and Affected Versions: Intel Active Management Technology versions prior to 12.0.5 Description: A Bleichenbacher-style side channel vulnerability exists in the TLS implementation of Intel Active Management Technology. This issue may allow an unauthenticated user to...

Microsoft Excel Information Disclosure Vulnerability (CNVD-2018-21209)

Microsoft Excel is a spreadsheet processing software in the Office suite of the American Microsoft Microsoft company. An information disclosure vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to access information that was previously deleted from the active...

Intel® Active Management Technology 9.x/10.x/11.x/12.x Security Review Cumulative Update Advisory

Summary: Multiple potential security vulnerabilities in Intel® Active Management Technology AMT in Intel® CSME firmware may allow arbitrary code execution, a partial denial of service or information disclosure. Intel is releasing Intel® CSME firmware updates to mitigate these potential...

Getting the most out of your branch local connection

In our global world of business, organizations often have multiple branch offices spanning every country. Some of these branches are quite large with their own IT infrastructure and personnel, while some are very small with just a few employees. In the past, these branch offices were connected to...