OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

PT-2019-16496 · Oracle · Oracle Outside In Technology +1

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology version 8.5.4 Description: The issue affects the Oracle Outside In Technology component of Oracle Fusion Middleware, specifically the Outside In Filters subcomponent. It allows an unauthenticated attacker with...

EulerOS 2.0 SP5 : libssh2 (EulerOS-SA-2019-1310)

According to the versions of the libssh2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds read flaw was discovered in libssh2 when a specially crafted SFTP packet is received from the server. A remote attacker who...

CVE-2019-9805

A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some functions, leading to potential memory corruption. This vulnerability affects Firefox 66...

The vulnerability of the “rdpdr_process” function implementation in the RDP client rdesktop, related to reading beyond the memory boundary, allows a attacker to cause a service failure.

The vulnerability of the “rdpdrprocess” function in the RDP client rdesktop implementation is related to reading data beyond the memory boundary. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to read data.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read data...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to read data.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read data...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to read data.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to read data...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to read data.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read data...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to read data.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to read data...

The vulnerability of Siemens Sinumerik programmable logic controllers lies in errors during exception handling, which allow intruders to read arbitrary data or execute arbitrary code in the kernel mode.

The vulnerability of Siemens Sinumerik programmable logic controllers is related to an error in exception handling. Exploiting this vulnerability could allow attackers to read arbitrary data or execute arbitrary code in the kernel mode...

CVE-2019-2419

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects component of Oracle PeopleSoft Products subcomponent: Form and Approval Builder. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Denial Of Service

Network Security Services NSS is vulnerable to denial of service. It exists due to the regression introduced by the fix for CVE-2013-1620 which does not properly check the data reading are initialized data, leading to a decryption failure and a TLS/SSL server crash...

CVE-2018-3263

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Sudo. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attacks o...

CVE-2018-3230

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Unspecified Vulnerability in Oracle Outside In Technology Component (CNVD-2019-28217)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Unspecified Vulnerability in Oracle Outside In Technology Component (CNVD-2019-28219)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Unspecified Vulnerability in Oracle Outside In Technology Component (CNVD-2019-28214)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Unspecified Vulnerability in Oracle Outside In Technology Component (CNVD-2019-28226)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Unspecified Vulnerability in Oracle Outside In Technology Component (CNVD-2019-28216)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...