CVE-2018-11950

Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850...

CVE-2018-11950

Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850...

Amazon Linux 2 : java-1.8.0-openjdk (ALAS-2018-1097)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

Third-Party Apps May Read Your Email: Learn How to Protect

By David Balaban Sad news about the unauthorized viewing of email messages by third-party application developers has alarmed Gmail users. It’s understood the Internet giant did not resort to ignoring the problem, the corporation provided detailed comments on possible exposure of the letters...

CVE-2018-15756

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controlle...

CVE-2018-12086

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests...

Thousands of Applications Vulnerable to RCE via jQuery File Upload

A widely used plugin by Blueimp called jQuery File Upload contains a years-old vulnerability that potentially places 7,800 different software applications at risk for compromise and remote code-execution RCE. jQuery File Upload is a is a user-contributed open-source package for software developer...

[SECURITY] Fedora 27 Update: patch-2.7.6-5.fc27

The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file patching th...

Unspecified Vulnerability in Oracle Retail Applications Retail Sales Audit Component

Oracle Retail Applications is a set of retail applications store solutions of Oracle Corporation Oracle. Retail Sales Audit is one of the audit components. An unspecified vulnerability exists in the Oracle Retail Applications Retail Sales Audit component. An attacker could use this vulnerability ...

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Cruise Shipboard Property Management System (CNVD-2019-40820)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Cruise Shipboard Property Management System

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

CVE-2018-15756

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controlle...

Oracle Retail Applications MICROS Retail-J Component Override Access Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. MICROS Retail-J is one of the advanced retail system components. An over-the-horizon access vulnerability exists in the Back Office subcomponent of the MICROS Retail-J component of...

CVE-2018-3243

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite subcomponent: None. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2018-3237

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: Support Cart. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...

CVE-2018-3235

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: None. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3237

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: Support Cart. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...

CVE-2018-3235

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: None. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3211

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Serviceability. Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2018-3209

Vulnerability in the Java SE component of Oracle Java SE subcomponent: JavaFX. The supported version that is affected is Java SE: 8u182. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require...