Oracle Database Server Portable Clusterware Component Access Control Error Vulnerability

Oracle Database Server is a set of relational database management system Oracle Oracle. The database management system provides data management, distributed processing and other functions.Portable Clusterware is one of the cluster hardware management components. A security vulnerability exists in...

Oracle Database Server Portable Clusterware Access Control Error Vulnerability

Oracle Database Server is a set of relational database management system Oracle Oracle. The database management system provides data management, distributed processing and other functions.Portable Clusterware is one of the cluster hardware management components. A security vulnerability exists in...

Oracle Retail Applications MICROS Lucas Access Control Error Vulnerability

Oracle Retail Applications is a suite of retail applications store solutions from Oracle USA. The product includes inventory management, sales management and customer management, etc. MICROS Lucas is one of the ARTS standard-based point of sale components. A security vulnerability exists in the...

Oracle Database Server Java VM Access Control Error Vulnerability

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Java VM is one of the Java virtual machine components. A security vulnerability exists in the Java VM...

PT-2019-4604

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 2.8.50 Symfony versions 3.x prior to 3.4.26 Symfony versions 4.x prior to 4.1.12 Symfony versions 4.2.x prior to 4.2.7 Description The issue is related to the symfony/cache and symfony/phpunit-bridge components, where...

PT-2019-2405

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 Pro affected versions not specified Description The issue is related to the lack of input validation in the SMC handler for the GLOBAL CMD ID NEED LOAD APP command in the TEE OS Trusted Core operating system. This could allow a...

Maliciously Tampering with Medical Imagery

In what I am sure is only a first in many similar demonstrations, researchers are able to add or remove cancer signs from CT scans. The results easily fool radiologists. I don't think the medical device industry has thought at all about data integrity and authentication issues. In a world where...

The vulnerability of microprogramming software to the Trusted Platform Module (TPM) cryptographic processor, related to security configuration errors, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software against the Trusted Platform Module TPM cryptographic processor is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

jenkins-plugin-script-security: sandbox bypass in script security plugin

A flaw was found in the Jenkins Script Security plugin version 1.53. An attacker with Overall/Read permissions is able to escape the sandbox and execute arbitrary code on the Jenkins master JVM. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

PT-2019-2183

Name of the Vulnerable Software and Affected Versions wpa supplicant versions prior to and including 2.4 wpa supplicant versions prior to and including 2.7 hostapd with SAE support prior to and including version 2.4 hostapd with EAP-pwd support prior to and including version 2.7 Description The...

PT-2019-4621

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.8.11 Samba versions prior to 4.9.6 Samba versions prior to 4.10.2 Description A flaw was found in the way Samba implemented an RPC endpoint emulating the Windows registry service API. This issue allows an unprivileged...

The vulnerability of the __proto__ mutation function in the JIT-compiler of the Firefox ESR browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the proto mutation function in the JIT-compiler of the Firefox ESR browser is related to type confusion errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the `gdImage` function in the GD Graphics Library allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the gdImage function: Pointer gdgifout.c, gdjpeg.c, gdwbmp.c In the GD Graphics Library, this vulnerability is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

PT-2019-5748 · Openjpeg +6 · Openjpeg +6

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.3.0 Description: The issue is related to an improper computation in the opj get encoding parameters function, which can lead to an integer overflow. This can potentially allow a remote attacker to access...

CVE-2019-1003040

A flaw was found in the Jenkins Script Security plugin. Groovy Plugins could be circumvented through methods supporting type casts and type coercion allowing attackers to invoke constructors for arbitrary types. The highest threat from this vulnerability is to data confidentiality and integrity a...

PT-2019-1027

Name of the Vulnerable Software and Affected Versions: RubyGems versions 2.6 through 3.0.2 Description: An issue in the Gem::GemcutterUtilities module of RubyGems may output the API response to stdout as it is, potentially leading to escape sequence injection if the API side modifies the response...

PT-2019-1025

Name of the Vulnerable Software and Affected Versions: RubyGems versions 2.6 through 3.0.2 Description: The issue is related to insufficient escaping in the Gem::UserInteraction module of the RubyGems package management system. This allows a remote attacker to inject escape sequences, potentially...

PT-2019-1028

Name of the Vulnerable Software and Affected Versions: RubyGems versions 2.6 through 3.0.2 Description: The issue is related to insufficient escaping in the Gem::CommandManager module of the RubyGems package management system. This allows a remote attacker to inject escape sequences, potentially...

The vulnerability of the `from_string` function in the Jinja2 templater, which allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the fromstring function in the Jinja2 templater for the Python programming language is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

PT-2019-1026

Name of the Vulnerable Software and Affected Versions: RubyGems versions 2.6 through 3.0.2 Description: An issue in RubyGems allows the gem owner command to output the contents of the API response directly to stdout. This can lead to escape sequence injection if the response is crafted, potential...