CVE-2019-2745

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java...

CVE-2019-2730

CVE-2019-2730 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Affected versions are 5.6.44 and prior and 5.7.18 and prior. An attacker with network access and high privileges can compromise MySQL Server, potentially enabling unauthorized update, in...

CVE-2019-2732

Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite subcomponent: Product Security. The supported version that is affected is 7.3.1.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2672

CVE-2019-2672 affects Oracle E-Business Suite One-to-One Fulfillment Print Server. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.8. The vulnerability allows unauthenticated, network-accessible access via HTTP, with user interaction required, potentially leading to unauthorized disclosure and m...

CVE-2019-2569

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS executes...

CVE-2018-3111

Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications subcomponent: Internal Operations. The supported version that is affected is 7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xsto...

PT-2019-16487

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Suite8 versions 8.9.6, 8.10.2 and 8.11 through 8.14 Description The issue allows a low-privileged attacker with network access via TCP/IP to compromise Oracle Hospitality Suite8, resulting in unauthorized access to critical...

PT-2019-10722

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation versions 16.0 and 17.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundatio...

CVE-2019-2751: Undefined Security Weakness

Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware subcomponent: OHS Config MBeans. Supported versions that are affected are 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle...

CVE-2019-2833: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 18.2.1. Easily exploitable vulnerability allows low privileged attacker having Import/Export privilege with network access via HTTP to compromise Oracle...

CVE-2019-2561: Undefined Security Weakness

Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications subcomponent: Internal Operations. Supported versions that are affected are 7.0 and 7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reta...

CVE-2019-2836: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 18.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successfu...

PT-2019-16483

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue affects the Oracle Payments component, specifically the File Transmission subcomponent. It allows an...

PT-2019-16436

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue affects the Oracle One-to-One Fulfillment component, specifically the Print Server subcomponent. It allows an...

CVE-2019-2738

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Compiling. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple...

PT-2019-2838

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.32 Oracle VM VirtualBox versions prior to 6.0.10 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with...

PT-2019-4552

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 68 Description The issue is related to unnecessary application permissions that provide additional remote troubleshooting access to the retired site input.mozilla.org, now redirecting to another site. This could serve...

Two Florida Cities Paid $1.1 Million to Ransomware Hackers This Month

In the last two weeks, Florida has paid more than $1.1 million in bitcoin to cybercriminals to recover encrypted files from two separate ransomware attacks—one against Riviera Beach and the other against Lake City. Lake City, a city in northern Florida, agreed on Monday to pay hackers 42 Bitcoin...

PT-2019-5043

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to a use after free in the media component, which can be exploited by a remote attacker to potentially access sensitive data, compromise data integrity, and cause a...

PT-2019-4484

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.0.21 and 5.3.11 Description The issue is related to the use of memory after it has been freed in the try merge free space function of the Linux kernel, specifically in the fs/btrfs/free-space-cache.c file. This can be...