Oracle Fusion Middleware WebCenter Content Component Unauthorized Operation Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. WebCenter Content is one of the components of the enterprise content management solution. A security...

BD Pyxis

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION : Public exploits are available. Vendor : Becton, Dickinson and Company BD Equipment : Certain BD Pyxis Products Vulnerability : Reusing a Nonce 2. RISK EVALUATION Successful exploitation of this vulnerability could allow data traffic manipulation,...

CVE-2018-2791

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2770

Vulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware subcomponent: OAAM Admin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Adaptive Acce...

CVE-2018-2878

Vulnerability in the PeopleSoft Enterprise HCM Shared Components component of Oracle PeopleSoft Products subcomponent: Notepad. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2862

The CVE-2018-2862 entry concerns Oracle Retail Applications’ Retail Point-of-Service component (User Interface). Affected are versions 13.3.8, 13.4.9, 14.0.4 and 14.1.3. The vulnerability enables a low-privileged, network-based attacker able to reach the service over HTTP to access and potentiall...

CVE-2018-2737

Vulnerability in the Oracle Retail Returns Management component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 2.3.8, 2.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

PT-2018-15794

Name of the Vulnerable Software and Affected Versions Oracle Adaptive Access Manager version 11.1.2.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Adaptive Access Manager. Successful attacks require human interaction from a person othe...

Microsoft Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data...

Microsoft JET Database Engine Remote Code Execution Vulnerability

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or...

Debian DSA-4164-1 : apache2 - security update

Several vulnerabilities have been found in the Apache HTTPD server. - CVE-2017-15710 Alex Nichols and Jakob Hirsch reported that modauthnzldap, if configured with AuthLDAPCharsetConfig, could cause an out of bound write if supplied with a crafted Accept-Language header. This could potentially be...

The vulnerability of the png_set_text_2 function in the libpng library, which allows a hacker to cause a service failure

The vulnerability of the pngsettext2 function in the libpng library is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by loading a fragment of text into the PNG structure, removing the text, and then adding another tex...

Siemens TIM 1531 IRC Security Bypass Vulnerability

The Siemens TIM 1531 IRC is a communication module from Siemens that handles data transfer using the Siemens remote control protocol SINAUT ST7. A security vulnerability exists in the Siemens TIM 1531 IRC prior to version 1.1. A remote attacker could use this vulnerability to perform administrati...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (KB4100480)

This host is missing a critical security update according to Microsoft KB4100480 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-4841

A vulnerability has been identified in TIM 1531 IRC All versions V1.1. A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read...

Design/Logic Flaw

A vulnerability has been identified in TIM 1531 IRC All versions V1.1. A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read...

CVE-2018-4841

CVE-2018-4841 (Siemens TIM 1531 IRC) affects TIM 1531 IRC, all versions prior to v1.1. Root cause: incorrect implementation of the authentication algorithm (CWE-303). Impact per sources: remote attacker with network access to port 80/TCP or 443/TCP can perform administrative operations without au...

CVE-2018-4841

A vulnerability has been identified in TIM 1531 IRC All versions V1.1. A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read...

CVE-2018-4841: Incorrect Implementation of Authentication Algorithm

A vulnerability has been identified in TIM 1531 IRC All versions V1.1. A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read...

Vulnerability Spotlight: Multiple Vulnerabilities in Allen Bradley MicroLogix 1400 Series Devices

These vulnerabilities were discovered by Jared Rittle and Patrick DeSantis of Cisco Talos. Summary Rockwell Automation Allen-Bradley MicroLogix 1400 Programmable Logic Controllers PLCs are marketed for use in a variety of different Industrial Control System ICS applications and processes. As such...