CVE-2018-3064

Disclaimer: This data contains information about vulnerable...

CVE-2018-3052

Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications subcomponent: Internal Operations. Supported versions that are affected are 10.8.x and 11.4.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS...

CVE-2018-3099

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-2888

The CVE-2018-2888 issue affects Oracle MICROS Retail-J (Back Office) components in Oracle Retail Applications, across versions 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x, 12.1.2.x and 13.1.x. The vulnerability allows unauthorized access and data modification with the attacker needing physical acces...

CVE-2018-3102

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-3018

Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: Shopping Cart. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2018-3100

Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware subcomponent: Process Analysis & Discovery. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows...

CVE-2018-3001

CVE-2018-3001 affects Oracle Hospitality Applications’ Hospitality Cruise Shipboard Property Management System (SPMS Suite), with the SPMS component in the 8.x line. The connected CNVD entry characterizes the flaw as an access control error that could let an attacker gain unauthorized access to d...

CVE-2018-3001

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: SPMS Suite. The supported version that is affected is 8.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructu...

CVE-2018-2989

The CVE-2018-2989 issue affects Oracle iLearning, specifically the Learner Administration subcomponent in version 6.2. It is exploitable via HTTP over the network by an unauthenticated attacker and requires user interaction, potentially granting unauthorized access to Oracle iLearning data and en...

CVE-2018-3096

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-2925

CVE-2018-2925 affects Oracle Fusion Middleware BI Publisher Web Server component. Affected are BI Publisher versions: 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0, and 12.2.1.3.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise BI Publisher and obtain unauthori...

CVE-2018-2767

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via...

CVE-2018-3056

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

Huawei SafeBox Manager 6.30.057.L - Bypass Vulnerability

Document Title: =============== Huawei SafeBox Manager 6.30.057.L - Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1789 Release Date: ============= 2018-07-17 Vulnerability Laboratory ID VL-ID: ====================================...

Ticketmaster Suffers Security Breach – Personal and Payment Data Stolen

Global entertainment ticketing service Ticketmaster has admitted that the company has suffered a security breach, warning customers that their personal and payment information may have been accessed by an unknown third-party. The company has blamed a third-party support customer service chat...

Security Bulletin: IBM Maximo Asset Management could allow an authenticated user to view query results that the user should not have access to view due to improper access control (CVE-2015-5051)

Summary IBM Maximo Asset Management contains a vulnerability which could allow an authenticated user to view query results that the user should not have access to view due to improper access control. This vulnerability could allow a local attacker to compromise data integrity. The vulnerability...

Researcher Finds Credentials for 92 Million Users of DNA Testing Firm MyHeritage

MyHeritage, an Israeli-based genealogy and DNA testing company, disclosed today that a security researcher found on the Internet a file containing the email addresses and hashed passwords of more than 92 million of its users. MyHeritage says it has no reason to believe other user data was...

FIFA public Wi-Fi guide: which host cities have the most secure networks?

We all know how easy it is for users to connect to open Wi-Fi networks in public places. Well, it is equally straightforward for criminals to position themselves near poorly protected access points – where they can intercept network traffic and compromise user data. A lack of essential traffic...

Library CMS 1.0 SQL Injection

Exploit Title: Library CMS 1.0 - SQL Injection Dork: N/A Date: 23.05.2018 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor : Wecodex Solutions Vendor Homepage: https://www.wecodex.com/item/view/library-management-system-in-php-and-mysql/1 Version: 1.0 Category: Webapps Tested on: Kali linux...