The vulnerability of Microprogrammed Software in HP Color LaserJet Pro and HP LaserJet Pro printers stems from the lack of measures taken to protect the structure of web pages. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of HP Color LaserJet Pro and HP LaserJet Pro printer software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the JunOS operating system, related to security configuration errors, allows attackers to compromise the integrity of protected information.

The vulnerability of the JunOS operating system is related to security configuration errors due to reserved multicast addresses like 224.0.0.x not being correctly aligned with addresses like 224.x.x.x. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...

PT-2019-3138 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: OpenSSL versions 1.0.2 through 1.0.2s OpenSSL versions 1.1.0 through 1.1.0k OpenSSL versions 1.1.1 through 1.1.1c Description: The issue is related to errors in the certificate authentication procedure. It allows an attacker to impact data...

Introducing EQR — The Need for Petabyte-Scale Real-Time Analysis

Making Fast Decisions from Lots of Data One of the most difficult things to solve for in the Security industry is scale. Security is essentially a big data problem—data that is dynamic, and variadic. You need to correlate lots of disparate data elements that contain dynamically changing parameter...

PT-2019-5415 · Docker +1 · Docker-Credential-Helpers +1

Name of the Vulnerable Software and Affected Versions: docker-credential-helpers versions prior to 0.6.3 Description: The issue is related to a double free in the List functions, which can lead to data integrity disruption. Recommendations: For versions prior to 0.6.3, update to version 0.6.3 or...

Oracle PeopleSoft Products PeopleSoft Enterprise FIN Project Costing Component Access Control Error Vulnerability

Oracle PeopleSoft Products is the United States Oracle Oracle company's set of enterprise human capital management solutions. The product provides human capital management, financial management, supplier relationship management and other functions.PeopleSoft Enterprise FIN Project Costing is one ...

Oracle Retail Applications Retail Xstore Office Component Access Control Error Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management, etc. Retail Xstore Office is one of the Web-based central management console component. An acces...

CVE-2019-2744

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1-12.0.3, 12.1.0-12.4.0 and 14.0.0-14.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2019-2789

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Design/Logic Flaw

Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion subcomponent: Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Planning. Successful...

CVE-2019-2800

CVE-2019-2800 affects Oracle MySQL Server (subcomponent: Server: Replication) with affected versions 8.0.16 and prior. The vulnerability arises in the MySQL Server replication path, enabling a low-privileged, network-accessible attacker to cause a hang or frequent crash (DOS) and may also give un...

CVE-2019-2733

Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite subcomponent: Product Security. The supported version that is affected is 7.3.1.5.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2883

Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications subcomponent: Internal Operations. Supported versions that are affected are 7.0 and 7.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retai...

Oracle VM VirtualBox Component Access Control Error Vulnerability (CNVD-2019-27299)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VM VirtualBox Component Access Control Error Vulnerability (CNVD-2019-27304)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle Support Tools Clusterware Component Denial of Service Vulnerability

Oracle Support Tools is a set of Oracle support tools from Oracle Corporation.Clusterware is a set of portable clusterware. A security vulnerability exists in the Trace File Analyzer TFA Collector subcomponent of the Clusterware component of Oracle Support Tools, version 12.1.0.2.0. An attacker...

Oracle Siebel CRM Siebel UI Framework Component Access Control Error Vulnerability

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions. The program includes sales management, marketing management, customer service systems, call center modules. Siebel UI Framework is one of the user interface framework components. A...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Component Access Control Error Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the HTTP data path subsystems subcomponent of the Sun ZFS Storage AK component version 8.8.3 i...

Oracle Solaris Component Access Control Error Vulnerability (CNVD-2019-28097)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Kernel subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11.4...

Oracle Solaris Component Access Control Error Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Common Desktop Environment subcomponent of the Solaris component version 10 of the Oracle Sun...