Security Bulletin:IBM SDK, Java Technology Edition Quarterly CPU - Apr 2016 - Includes Oracle Apr 2016 CPU affect for IBM Connections

Summary There is vulnerability in IBM® SDK Java™ Technology Edition, Java™ Version 6 and Java™ Version 7 that is used by Content Collector for IBM Connections.This issue was disclosed as part of the IBM Java SDK updates in January 2016 Vulnerability Details CVEID: CVE-2016-0264 DESCRIPTION: A...

RHEL 8 : mysql:8.0 (RHSA-2019:2511)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2511 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The...

NewStart CGSL MAIN 4.05 : apr Vulnerability (NS-SA-2019-0115)

The remote NewStart CGSL host, running version MAIN 4.05, has apr packages installed that are affected by a vulnerability: - An out-of-bounds array dereference was found in aprtimeexpget. An attacker could abuse an unvalidated usage of this function to cause a denial of service or potentially lea...

NewStart CGSL MAIN 5.04 : apr Vulnerability (NS-SA-2019-0001)

The remote NewStart CGSL host, running version MAIN 5.04, has apr packages installed that are affected by a vulnerability: - An out-of-bounds array dereference was found in aprtimeexpget. An attacker could abuse an unvalidated usage of this function to cause a denial of service or potentially lea...

Oracle Enterprise Manager Ops Center (Apr 2019 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component: - A deserialization vulnerability in Apache Commons FileUpload allows for remote code execution. CVE-2016-1000031 - An...

EulerOS Virtualization for ARM 64 3.0.1.0 : apr (EulerOS-SA-2019-1374)

According to the version of the apr package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An out-of-bounds array dereference was found in aprtimeexpget. An attacker could abuse an unvalidated usage of this function ...

EulerOS Virtualization 3.0.1.0 : apr (EulerOS-SA-2019-1452)

According to the version of the apr package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An out-of-bounds array dereference was found in aprtimeexpget. An attacker could abuse an unvalidated usage of this function to cause a...

Oracle Java SE 7 < Update 221 / 8 < Update 211 / 11 < Update 3 / 12 < Update 1 Multiple Vulnerabilities (Apr 2019 CPU)

Binary data 700660.prm...

Oracle Java SE 1.7.0_221 / 1.8.0_211 / 1.11.0_3 / 1.12.0_1 Multiple Vulnerabilities (Apr 2019 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 221, 8 Update 211, 11 Update 3, or 12 Update 1. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D - Libraries - RMI - Windows DLL Nessu...

Oracle WebLogic Server Multiple Vulnerabilities (Apr 2019 CPU)

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities: - An unspecified vulnerability in the Spring Framework allows a low privileged, remote attacker with network access via HTTP to compromise and takeover the Oracle Communications Unified...

Oracle Fusion Middleware Oracle HTTP Server (Apr 2019 CPU)

The version of Oracle HTTP Server installed on the remote host is affected by a stack-based buffer overflow as noted in the April 2019 CPU advisory. The condition exists in the included cURL library due to using unsigned math when preventing the overflow. An unauthenticated, remote attacker can...

Oracle Enterprise Manager Cloud Control (Apr 2019 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component: - Networking component of Enterprise Manager Base Platform Spring Framework is easily exploited and may allow an...

mod_auth_mellon: open redirect in logout url when using URLs with backslashes

A vulnerability was found in modauthmellon before v0.14.2. An open redirect in the logout URL allows requests with backslashes to pass through by assuming that it is a relative URL, while the browsers silently convert backslash characters into forward slashes treating them as an absolute URL. Thi...

Solaris 10 (sparc) : 151912-14

SunOS 5.10: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Apr/15/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid124076; scriptversion"1.2"; scriptcvsdate"Date:...

Solaris 10 (x86) : 147794-23

SunOS 5.10x86: Kerberos patch. Date this patch was last updated by Sun : Apr/15/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid124078; scriptversion"1.2"; scriptcvsdate"Date:...

Solaris 10 (x86) : 151913-14

SunOS 5.10x86: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Apr/15/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid124080; scriptversion"1.2"; scriptcvsdate"Dat...

macOS < 10.14 Multiple Vulnerabilities

Binary data 700518.prm...

Photon OS 1.0: Apr PHSA-2017-1.0-0093

An update of the apr package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-1.0-0093. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121778;...

Photon OS 2.0: Apr PHSA-2017-0053

An update of the apr package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0053. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121776;...

cobonaat.com XSS vulnerability

Open Bug Bounty ID: OBB-718993 Description| Value ---|--- Affected Website:| cobonaat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...