CVE-2020-2706

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Project Manager. Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 -...

CVE-2020-2594

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Project Manager. Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 -...

CVE-2020-2706

CVE-2020-2706 affects Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM), specifically the Project Manager component. Affected software includes Oracle P6 EPPM versions 16.2.0.0–16.2.19.3, 17.12.0.0–17.12.17.0, 18.8.0.0–18.8.18.0, 19.12.1.0–19.12.3.0, and 20.1.0.0–20.2.0.0. The vu...

CVE-2020-2706

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Project Manager. Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 -...

XSS Vulnerability in Construction System of Guangzhou Sanjin Network Technology Co.

Guangzhou Sanjin Network Technology Co., Ltd. is a one-stop provider of Internet application services, providing e-commerce solutions for Chinese enterprises. XSS vulnerability exists in the construction system of Guangzhou Sanjin Network Technology Co. Attackers can utilize the vulnerability to...

SFO Websites Hacked: Airport Discloses Data Breach

The San Francisco International Airport SFO disclosed this week two of its websites had been hacked and lead to the disclosure of some users’ login credentials at both sites. The attacks occurred in March and compromised were SFOConnect.com and SFOConstruction.com, both relatively low-traffic...

PbootCMS Enterprise Web Development and Construction Management System suffers from SQL Injection Vulnerability

PbootCMS is a new core permanent open source free PHP web development and building management system CMS developed by Avantech. PbootCMS enterprise website development and construction management system has a SQL injection vulnerability that can be exploited by remote attackers to submit special...

SQL Injection Vulnerability in IISI's Jinan Branch Website Building System

IISI Jinan branch to provide a full set of Internet solutions for enterprises as the main direction is a set of domain name registration, IDC services, website construction and operation, APP development, software system development and other Internet services as one of the group enterprises. IIS...

SQL Injection Vulnerability in the Construction System of Beijing Bolehoo Technology Co.

Ltd. is a website construction company integrating planning, design, production and technology development. There is a SQL injection vulnerability in the construction system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information from the databa...

SQL Injection Vulnerability in Qingdao Shangzhixin Network Technology Co.

Qingdao business to letter network dedicated to Qingdao website construction, Qingdao Baidu promotion. Qingdao Shangzhixin Network Technology Co., Ltd. website construction system there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Format string

Ansible before 1.5.5 constructs filenames containing user and password fields on the basis of deb lines in sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by leveraging existence of a file that uses the "deb...

Small Tax-Preparation Firms at Higher Risk this Tax Season, Report

This tax season crooks are targeting users with a new crop of scams that include leveraging remote desktop software and compromising small tax-prep company websites. “If you have the word ‘tax’ in your domain name; you’re a target this year,” warns Sherrod DeGrippo, senior director of threat...

Code injection

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: WebAccess. Supported versions that are affected are 15.1.0.0-15.2.18.7, 16.1.0.0-16.2.19.0, 17.1.0.0-17.12.16.0, 18.1.0.0-18.8.16.0 and 19.12.0.0. Easily exploitable...

CVE-2020-2707

CVE-2020-2707 concerns Oracle Primavera P6 EPPM WebAccess. Affected versions are 15.1.0.0–15.2.18.7, 16.1.0.0–16.2.19.0, 17.1.0.0–17.12.16.0, 18.1.0.0–18.8.16.0 and 19.12.0.0. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, with user interaction require...

CVE-2020-2556

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily exploitable vulnerability...

CVE-2020-2556

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily exploitable vulnerability...

Oracle Ties Previous All-Time Patch High with January Updates

Oracle has patched 334 vulnerabilities across all of its product families in its January 2020 quarterly Critical Patch Update CPU. Out of these, 43 are critical/severe flaws carrying CVSS scores of 9.1 and above. The CPU ties for Oracle’s previous all-time high for number of patches issued, in Ju...

stmb-construction-chalets-bois.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1066325 Security Researcher howardpotts Helped patch 258 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

tree-kill code injection vulnerability (CNVD-2019-46973)

tree-kill is a package for killing processes in the process tree. A code injection vulnerability exists in tree-kill Windows. The vulnerability arises from a network system or product that does not properly filter specific elements of externally input data during the construction of a code segmen...

CVE-2019-12408

It was discovered that the C++ implementation which underlies the R, Python and Ruby implementations of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory being unintentionally shared if Arrow...