CVE-2019-2403

CVE-2019-2403 affects the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications, specifically version 2.10 . The vulnerability enables an unauthenticated, network-accessible attacker (via HTTP) to potentially perform unauthorized updates, inserts, or deletes to Oracle Sim...

CVE-2019-2546

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: SQL Extensions. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2019-2397

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracl...

CVE-2019-2549

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Logoff Page. The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2401

CVE-2019-2401 affects Oracle Hospitality Reporting and Analytics in Oracle Food and Beverage Applications (affected version 9.1.0). The vulnerability allows a low-privileged admin with network access via HTTP to compromise data, enabling unauthorized creation, deletion, or modification of critica...

CVE-2019-2431

CVE-2019-2431 affects Oracle Argus Safety, specifically the Console subcomponent, in versions 8.1 and 8.2 . The flaw allows an unauthenticated attacker with network access via HTTP to compromise Argus Safety, with exploitation requiring human interaction. The vulnerability can enable unauthorized...

CVE-2019-2403

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful...

CVE-2019-2407

The CVE-2019-2407 entry pertains to Oracle Hospitality Reporting and Analytics in Oracle Food and Beverage Applications, affected version 9.1.0. The vulnerability is exploitable by a low-privilege attacker with Report privileges who can log on to the infrastructure hosting the component, potentia...

CVE-2019-2402

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successfu...

CVE-2019-2401

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...

Code injection

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to...

CVE-2019-2403: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful...

CVE-2019-2546: Undefined Security Weakness

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: SQL Extensions. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2019-2430: Undefined Security Weakness

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Console. Supported versions that are affected are 8.1 and 8.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety...

CVE-2019-6447: Missing Authentication for Critical Function

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to...

CVE-2019-2549: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Logoff Page. The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2431: Undefined Security Weakness

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Console. Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus Safety...

CVE-2019-2432: Undefined Security Weakness

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Login. Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety...

CVE-2018-3125: Undefined Security Weakness

Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications subcomponent: Security SQL Logger. The supported version that is affected is 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2397: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracl...