CVE-2019-0266

The CVE-2019-0266 entry pertains to SAP HANA Extended Application Services (XS advanced) 1.0, where under certain conditions credentials of platform users are written to a SAP HANA system trace file. The root cause is that sensitive credentials are logged in a trace file, increasing the risk of i...

CVE-2019-0261

CVE-2019-0261 affects SAP HANA XS Advanced: improper authentication checks for XS Advanced platform and business users. Root cause described as authentication bypass in XS Advanced; fixed in SAP HANA 1/2 SPS0 as part of 1.0.97–1.0.99. The issue carried high risk with CVSS v3 base score 9.8 (NETWO...

Unspecified Vulnerability in SAP ABAP

SAP Netweaver is a set of service-oriented integrated application platform from SAP, which provides a development and runtime environment for SAP applications. The platform provides a development and runtime environment for SAP applications, and ABAP is an application server that runs in NetWeave...

Updated java-1.8.0-openjdk packages fix security vulnerability

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

MGASA-2019-0071 Updated java-1.8.0-openjdk packages fix security vulnerability

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

The vulnerability of the Java Advanced Management Console (Server) component of the Oracle Java SE software platform allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Java Advanced Management Console Server component of the Oracle Java SE software platform is related to insufficient access control. Exploiting this vulnerability may allow an attacker operating remotely to gain unauthorized access to protected data or cause service...

PT-2019-2947 · Cisco +1 · Cisco Webex Network Recording Player +2

Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description: The issue is related to improper validation of Advanced Recording...

PT-2019-2945 · Cisco · Cisco Webex Network Recording Player +1

Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player versions affected versions not specified Cisco Webex Player versions affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by sending a...

PT-2019-2946 · Cisco · Cisco Webex Network Recording Player +1

Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player versions affected versions not specified Cisco Webex Player versions affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to execute...

PT-2019-2948 · Cisco +1 · Cisco Webex Network Recording Player +2

Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description: The issue is related to improper validation of Advanced Recording...

X (Formerly Twitter): Protected tweets exposure through the URL

Summary Leaking sensitive information from protected tweets via a prepared website. This vulnerability could lead to exposure of information such as credit card numbers, bank account numbers, phone numbers, tokens, specific words or even the whole phrases but also the exposure of any additional...

Open Positioner: my new project for tracking IT and security jobs

The idea of my new project is to retrieve the data from job-searching websites and provide better filtering, searching and visualization. I think for the most people who read this, searching for a job in Internet is a pretty common activity. Even if you are not going to change job right now, it...

Advanced Host Monitor 11.90 Beta Denial Of Service

Exploit Title: Advanced Host Monitor 11.90 Beta - 'Registration number' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2019-01-30 Vendor Homepage: https://www.ks-soft.net Software Link : https://www.ks-soft.net/download/hm1190.exe Tested Version: 11.90 Beta Vulnerability Type:...

What Enterprise Leaders Should know about Persistent Threats in 2019

Staving off critical threats in the current cybersecurity landscape is a tall order for any size organization. As hackers continually shift and improve upon their attack and breach strategies, IT and security stakeholders must do their best to keep up and remain informed of these trends. This is...

Security Bulletin: IBM BladeCenter Advanced Management Module is affected by glibc vulnerabilities (CVE-2015-1472, CVE-2013-7423, CVE-2014-7817, and CVE-2014-9402)

Summary Security vulnerabilities in glibc affect IBM BladeCenter Advanced Management Module AMM. Vulnerability Details Summary Security vulnerabilities in glibc affect IBM BladeCenter Advanced Management Module AMM. Vulnerability Details: CVE-ID: CVE-2013-7423 Description: GNU glibc could allow a...

Security Bulletin: IBM BladeCenter Advanced Management Module is affected by libxml2 vulnerabilities (CVE-2014-0191, CVE-2013-2877, CVE-2014-3660)

Summary Security vulnerabilities libxml2 affect IBM BladeCenter Advanced Management Module. Vulnerability Details Summary Security vulnerabilities libxml2 affect IBM BladeCenter Advanced Management Module. Vulnerability Details: CVE-ID: CVE-2014-0191 Description: Libxml2 is vulnerable to a denial...

Advanced Host Monitor 11.90 Beta - Registration number Denial of Service Exploit

Exploit Title: Advanced Host Monitor 11.90 Beta - 'Registration number' Denial of Service PoC Discovery by: Luis Martinez Vendor Homepage: https://www.ks-soft.net Software Link : https://www.ks-soft.net/download/hm1190.exe Tested Version: 11.90 Beta Vulnerability Type: Denial of Service DoS Local...

Advanced Host Monitor 11.90 Beta - Registration number Denial of Service (PoC)

Advanced Host Monitor 11.90 Beta - Registration number Denial of Service PoC Exploit Title: Advanced Host Monitor 11.90 Beta - 'Registration number' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2019-01-30 Vendor Homepage: https://www.ks-soft.net Software Link :...

Advanced Host Monitor 11.90 Beta - 'Registration number' Denial of Service (PoC)

Exploit Title: Advanced Host Monitor 11.90 Beta - 'Registration number' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2019-01-30 Vendor Homepage: https://www.ks-soft.net Software Link : https://www.ks-soft.net/download/hm1190.exe Tested Version: 11.90 Beta Vulnerability Type:...

The vulnerability of the Advanced Console controller component of Oracle Identity Manager allows a malicious actor to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Advanced Console controller component of Oracle Identity Manager is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data or cause service failures using the...