824 matches found
Security Bulletin: Vulnerability in IBM Java Runtime affect IBM Host On-Demand
Summary There is a Vulnerability in IBM® Runtime Environment Java™ , Version 8 used by IBM Host On-Demand These issues were disclosed as part of the IBM Java SDK updates in October 2017. Vulnerability Details CVEID: CVE-2017-10309 DESCRIPTION: An unspecified vulnerability related to the Java SE...
CVE-2020-2557
Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain component: Security. Supported versions that are affected are 12.2.4, 12.2.4.1, 12.2.5 and 12.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
Buffer overflow
Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain component: Security. Supported versions that are affected are 12.2.4, 12.2.4.1, 12.2.5 and 12.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-2557
Oracle Demantra Demand Management (versions 12.2.4–12.2.5.1) is vulnerable due to insufficient access control in the Security component, allowing an unauthenticated attacker with network access over HTTP to compromise data. Successful attacks can result in unauthorized update, insert, or delete o...
Oracle Demantra Demand Management CVE-2020-2557 Remote Security Vulnerability
Description Oracle Demantra Demand Management is prone to a remote security vulnerability. The vulnerability can be exploited over 'HTTP' protocol. The 'Security' component is affected. This vulnerability affects the following supported versions: 12.2.4, 12.2.4.1, 12.2.5, 12.2.5.1 Technologies...
PT-2020-1520 · Oracle · Oracle Demantra Demand Management
Name of the Vulnerable Software and Affected Versions: Oracle Demantra Demand Management versions 12.2.4 through 12.2.5.1 Description: The issue is related to insufficient access control in the Security component of Oracle Demantra Demand Management, allowing a remote attacker to gain unauthorize...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Host On-Demand
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8.0 SR5 FP 20 used by Host On-Demand. Host On-Demand has addressed the applicable CVEs. These issues were disclosed as part of the IBM Java SDK and Runtime Environment updates in July 2019. Vulnerability Details...
Sodinokibi Ransomware Behind Travelex Fiasco: Report
The Sodinokibi ransomware strain is apparently behind the New Year’s Eve attack on foreign currency-exchange giant Travelex, which has left its customers and banking partners stranded without its services. The criminals behind the attack are demanding a six-figure sum in return for the decryption...
Security Bulletin: 10x vulnerability in IBM Control Center could allow an outside user to obtain the ID (CVE-2017-1152)
Summary IBM 10x vulnerability in IBM Control Center does not properly update the session id which could allow a user to obtain the ID in further attacks against the system. Vulnerability Details CVEID: CVE-2017-1152 DESCRIPTION: IBM Sterling Global Integration On-Demand Environment does not...
Threat spotlight: the curious case of Ryuk ransomware
Ryuk. A name once unique to a fictional character in a popular Japanese comic book and cartoon series is now a name that appears in several rosters of the nastiest ransomware to ever grace the wild web. For an incredibly young strain—only 15 months old—Ryuk ransomware gaining such notoriety is...
Maze Ransomware Behind Pensacola Attack, Data Breach Looms
The Maze ransomware is likely the culprit behind the recently reported cyberattack on Pensacola, Fla. that occurred earlier this week, which downed systems citywide. In an email sent to county commissioners, IT administrators said that the Florida Department of Law Enforcement said that the...
Command Execution Vulnerability in SeaCMS
SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCMS has a command execution vulnerability that can be exploited by attackers to gain control of the web server...
Ransomware: 30 Years and Still Going Strong
In the tech world, systems – and methods to break said systems – seem to evolve by the minute. Technological advancement grows exponentially each year, and the realm of cybersecurity is no exception. However, some entities have survived and even thrived over the decades, rather than falling...
Code execution vulnerability in seacms backend (CNVD-2019-43687)
Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a code execution vulnerability in the backend of seacms, which can be exploited by attackers to gain server privileges...
Code execution vulnerability in seacms backend (CNVD-2019-43691)
Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a code execution vulnerability in the backend of seacms, which can be exploited by attackers to gain server privileges...
Code execution vulnerability in seacms backend (CNVD-2019-43690)
Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a code execution vulnerability in the backend of seacms, which can be exploited by attackers to gain server privileges...
Code execution vulnerability in seacms backend (CNVD-2019-43684)
Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a code execution vulnerability in the backend of seacms, which can be exploited by attackers to gain server privileges...
SQL injection vulnerability in seacms backend (CNVD-2019-43683)
Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the backend of seacms, which can be exploited by attackers to obtain sensitive database information...
Code execution vulnerability in seacms backend (CNVD-2019-43686)
Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a code execution vulnerability in the backend of seacms, which can be exploited by attackers to gain server privileges...
(0Day) Jenkins Fortify on Demand Uploader Cleartext Storage of Credentials Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Jenkins Fortify On Demand Uploader. Authentication is required to exploit this vulnerability. The specific flaw exists within the Fortify On Demand Uploader plugin. The issue results from...