Unspecified Vulnerability in Oracle JD Edwards EnterpriseOne Tools (CNVD-2018-19475)

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle, providing financial management, project management, and asset lifecycle management applications.JD Edwards EnterpriseOne Tools is one of the tool components. A security vulnerabili...

Unspecified Vulnerability in Oracle Primavera Unifier (CNVD-2018-24123)

Oracle Construction and Engineering Suite is Oracle's suite of combined management solutions for construction projects, of which Primavera Unifier is a complete project lifecycle management solution component. A security vulnerability exists in the Core subcomponent of the Primavera Unifier versi...

Unspecified Vulnerability in Oracle Primavera Unifier (CNVD-2018-24121)

Oracle Construction and Engineering Suite is Oracle's suite of combined management solutions for construction projects, of which Primavera Unifier is a complete project lifecycle management solution component. A security vulnerability exists in the Core subcomponent of the Primavera Unifier versi...

Unspecified Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (CNVD-2018-24115)

Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...

Unspecified Vulnerability in Oracle JD Edwards EnterpriseOne Tools (CNVD-2018-19477)

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle, providing financial management, project management, and asset lifecycle management applications.JD Edwards EnterpriseOne Tools is one of the tool components. A security vulnerabili...

Unspecified Vulnerability in Oracle Communications Messaging Server

Oracle Communications Applications is a suite of Oracle applications for rapidly delivering and monetizing digital life communications.Communications Messaging Server is one of the messaging email server components. A security vulnerability exists in the Web Client subcomponent of the...

Unspecified Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (CNVD-2018-24117)

Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...

Unspecified Vulnerability in Oracle Primavera Unifier (CNVD-2018-24122)

Oracle Construction and Engineering Suite is Oracle's suite of combined management solutions for construction projects, of which Primavera Unifier is a complete project lifecycle management solution component. A security vulnerability exists in the Core subcomponent of the Primavera Unifier versi...

PT-2018-3182 · Neomutt +4 · Neomutt +4

Name of the Vulnerable Software and Affected Versions: NeoMutt versions prior to 2018-07-16 Description: An issue exists due to the improper restriction of '/' characters in the newsrc.c component, potentially leading to unsafe interactions with cache pathnames. This could allow a remote attacker...

The vulnerability of Qualcomm Audio component in the Android operating system allows attackers to compromise the integrity, accessibility, and confidentiality of data.

The vulnerability of the Qualcomm Audio omx aac component in the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Qualcomm Data Services component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Qualcomm Data Services’ Android operating system stems from an overflow in memory buffers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Qualcomm Radio Interface Layer component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm Radio Interface Layer component in the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the Qualcomm GERAN component of the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the GERAN component GSM EDGE Radio Access Network of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the Qualcomm Modem component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm Modem component in the Android operating system is related to buffer overflows during IMS calls. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

IEEE Statement on Strong Encryption vs. Backdoors

The IEEE came out in favor of strong encryption: IEEE supports the use of unfettered strong encryption to protect confidentiality and integrity of data and communications. We oppose efforts by governments to restrict the use of strong encryption and/or to mandate exceptional access mechanisms suc...

USN-3691-1: OpenJDK 7 vulnerabilities

It was discovered that the Security component of OpenJDK did not correctly perform merging of multiple sections for the same file listed in JAR archive file manifests. An attacker could possibly use this to modify attributes in a manifest without invalidating the signature. CVE-2018-2790 Francesc...

Security Bulletin: IBM Maximo Asset Management could allow an authenticated user to change or view information that the user should not have access to due to issues with the Scheduler functionality (CVE-2015-7396)

Summary IBM Maximo Asset Management could allow an authenticated user to change or view information that the user should not have access to due to issues with the Scheduler functionality. This vulnerability could allow a local attacker to compromise data integrity and confidentiality. The...

Security Bulletin: IBM Cúram Social Program Management is vulnerable to cross-site request forgery attacks (CVE-2014-6090).

Summary IBM Cúram Social Program management contains a number of servlets which do not adequately protect against CSRF. This could potentially allow an attacker to affect the integrity of data managed by these servlets. Vulnerability Details CVEID: CVE-2014-6090 DESCRIPTION: IBM Curam Social...

Security Bulletin: Vulnerability in Rational Software Architect Design Manager and Rhapsody Design Manager (CVE-2013-5459)

Summary An unspecified vulnerability within IBM Rational Software Architect RSA Design Manager and Rational Rhapsody Design Manager may affect data integrity. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for...

Security Bulletin: Multiple vulnerabilities in IBM QRadar SIEM (CVE-2014-0838, CVE-2014-0835, CVE-2014-0836, CVE-2014-0837)

Summary Multiple vulnerabilities exist in the AutoUpdate settings page and the AutoUpdate process within the IBM QRadar SIEM that when used together could result in remote code execution. Vulnerability Details VULNERABILITY DETAILS: CVE ID: CVE-2014-0838 DESCRIPTION: A flaw in the IBM QRadar...