CVE-2019-2402

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successfu...

CVE-2019-2540

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2019-2549

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Logoff Page. The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2425

CVE-2019-2425 affects Oracle Hospitality Reporting and Analytics, a component of Oracle Food and Beverage Applications. Affected product/version: 9.1.0. The vulnerability allows an unauthenticated, network-accessible attacker (HTTP) to compromise data: unauthorized updates/insertions/deletions an...

CVE-2019-2497

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: Messages. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2019-2423

CVE-2019-2423 affects Oracle PeopleSoft Enterprise PeopleTools (PIA Search subcomponent) with affected versions 8.55, 8.56, and 8.57. The vulnerability enables unauthenticated remote access over HTTP to potentially update, insert, delete, or read data in PeopleSoft PeopleTools and is described as...

CVE-2019-2546

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: SQL Extensions. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2019-2546

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: SQL Extensions. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28449)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. partner management is one of the...

Hack Allows Escape of Play-with-Docker Containers

Researchers hacked the Docker test platform called Play-with-Docker, allowing them to access data and manipulate any test Docker containers running on the host system. The proof-of-concept hack does not impact production Docker instances, according to CyberArk researchers that developed the...

WordPress 4.8.x < 4.8.8 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Authors could alter meta data to delete files that they weren't authorized to. - Authors could create posts of unauthorized types with specially crafted input. -...

F5 BIG-IP APM and BIG-IP APM Clients svpn elevation of privilege vulnerability

F5 BIG-IP APM and BIG-IP APM Clients are both products of F5 Corporation in the U.S. F5 BIG-IP APM is a suite of access and security solutions. the APM Client is a suite of APM client software. svpn is one of the private VPN components. An elevation of privilege vulnerability exists in F5 BIG-IP...

Amazon Linux 2 : java-1.7.0-openjdk (ALAS-2018-1111)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

mysql: Server: DML unspecified vulnerability (CPU Apr 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Authorization

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions...

CVE-2018-15692

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions...

CVE-2018-15692

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions...

CVE-2018-15692

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier allows authenticated users authorization bypass and data manipulation in certain functions...

CVE-2018-15692

Inova Partner 5.0.5-RELEASE, Build 0510-0906 and earlier is affected by an authorization bypass that allows authenticated users to access restricted functionality and manipulate data in certain functions. This vulnerability is described across multiple sources (NVD entry CVE-2018-15692 and CNVD/P...

Windows Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data...