CVE-2020-2601

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

CVE-2020-2582

CVE-2020-2582 affects Oracle E-Business Suite iStore (Shopping Cart) and is confirmed in connected sources as affecting 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows unauthenticated network access via HTTPS to Oracle iStore, with user interaction required for exploitation, leading to ...

CVE-2020-2582

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iStore...

CVE-2020-2541

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2548

CVE-2020-2548 affects Oracle WebLogic Server 10.3.6.0.0 (WLS Core Components). The vulnerability allows a high-privileged attacker with network access via HTTP to compromise WebLogic Server, with required user interaction and potential unauthorized update/insert/delete and read access. Root cause...

CVE-2020-2550

CVE-2020-2550 affects Oracle WebLogic Server (WLS Core Components) and is associated with versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability arises from insufficient access control in the WLS Core Components, enabling a locally authenticated attacker with logon to the i...

CVE-2020-2536

CVE-2020-2536 pertains to Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware. Affected: Outside In Filters in Oracle Outside In Technology code (product family noted as part of the Outside In SDKs); vulnerable version cited as 8.5.4. Access: unauthenticated attacker...

CVE-2020-2536

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

PT-2020-1521 · Oracle · Primavera P6 Enterprise Project Portfolio Management

Name of the Vulnerable Software and Affected Versions: Primavera P6 Enterprise Project Portfolio Management versions 16.2.0.0 through 16.2.19.0 Primavera P6 Enterprise Project Portfolio Management versions 17.12.0.0 through 17.12.16.0 Primavera P6 Enterprise Project Portfolio Management versions...

PT-2020-1423 · Oracle · Oracle Enterprise Manager

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Manager versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description: The issue is related to a component of the Enterprise Manager Base Platform product, specifically the Connector Framework, and is associated with inadequate access...

CVE-2018-3286

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2019-2922

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 5.6.45 and prior and 5.7.27 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Privileged Identity Manager

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Security Privileged Identity Manager ISPIM. Vulnerability Details CVEID: CVE-2019-11775 DESCRIPTION: All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize ...

TP-Link Routers Give Cyberattackers an Open Door to Business Networks

A firmware vulnerability in TP-Link Archer C5 v4 routers used in enterprise and home environments could allow unauthorized, remote access to the device with administrative privileges. The bug CVE-2017-7405 affects models that run firmware version 3.16.0 0.9.1 v600c.0 Build 180124 Rel.28919n. Firs...

Security Bulletin: Vulnerability in OSPFv2 Routing Protocol Used in IBM i Operating System (CVE-2013-0149 and CVE-2013-5385)

Problem : The OSPFv2 routing protocol specified in RFC 2328 has an ambiguity that can be exploited and allow for traffic to be black-holed and/or redirected. A PTF is provided. Resolving The Problem VULNERABILITY DETAILS: DESCRIPTION: A potential protocol vulnerability has been identified in the...

Microsoft Excel Information Leakage Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to compromise a user's computer or data with the help of specially crafted document files...

The vulnerability of the mod_session module in the Apache HTTP Server allows a hacker to compromise the integrity of protected data.

The vulnerability of the modsession module in the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected data using the Session header...

CVE-2019-2996

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Deployment. The supported version that is affected is Java SE: 8u221; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

Lizard Squad Threatens UK's Labour Leader with Cyberattacks Against His Family

Lizard Squad, the well-known hacktivist cybergang, is pledging to mount personal cyberattacks on Britain’s Labour Party leader, Jeremy Corbyn. As the UK continues to be roiled by Brexit debate ahead of a Dec. 12 general election, the Labour Party said on Tuesday that it had been targeted by a...

Input validation

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...