CVE-2019-5229

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could...

The vulnerability of the Wireless sub-component of the Oracle Field Service component in the Oracle E-Business Suite automation system for enterprise operations allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Wireless component of the Oracle Field Service system, a part of the Oracle E-Business Suite, relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly...

The vulnerability of the Kerberos component in Java SE and Java SE Embedded software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Kerberos component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information using Kerberos network...

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to remotely modify, add, or delete data, or gain unauthorized access to...

The vulnerability of the Libraries component of Java SE and Java SE Embedded software platforms allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to read, modify, add, or delete data using various network...

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to read, modify, or delete data, or to cause a service failure.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, modify, add, or delete access to data, or cause service interruptions through...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows attackers to cause system downtime or service failures.

The vulnerability of the MySQL Server component involves deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause downtime or service failures using the MySQL network protocol...

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to remotely modify, add, or delete data, or gain unauthorized access to...

Gamers Hit with Nvidia GPU Driver, GeForce Flaws

Nvidia has issued fixes for high-severity flaws in two popular gaming products, including its graphics driver for Windows and GeForce Experience. The flaws can be exploited to launch an array of malicious attacks – from denial-of-service efforts DoS to escalation of privileges. The majority of th...

Mozilla Firefox ESR < 31.2 Multiple Vulnerabilities

Binary data 701248.prm...

Mail.ru: Account TakeOver through password recovery at am.ru

Insufficient protection allowed account takeover at am.ru via account recovery code bruteforcing Common flaws of SMS auth: https://blog.deteact.com/common-flaws-of-sms-auth/...

Vulnerability of the Server component: The DDL system for database management by Oracle MySQL Server, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The DDL commands in the Oracle MySQL database management system are related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Server: Optimizer component of the Oracle MySQL Server database management system allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s Parser component, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Watch Out IT Admins! Two Unpatched Critical RCE Flaws Disclosed in rConfig

If you're using the popular rConfig network configuration management utility to protect and manage your network devices, here we have an important and urgent warning for you. A cybersecurity researcher has recently published details and proof-of-concept exploits for two unpatched, critical remote...

ThreatList: Most Retail Hardware Bug Bounty Flaws Are Critical

Almost all of hardware vulnerabilities – 90 percent – that were submitted to retail bug bounty programs so far this year were categorized as critical, showing that Point of Sale systems and other retail hardware assets remain a serious security issue. That’s due to the fact that retail hardware...

USN-4168-1 libidn2 vulnerabilities

It was discovered that Libidn2 incorrectly handled certain inputs. A attacker could possibly use this issue to impersonate domains. CVE-2019-12290 It was discovered that Libidn2 incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. CVE-2019-18224...

The vulnerability of the Advantech WebAccess remote monitoring software, related to access control deficiencies, allows a intruder to trigger a service failure.

The vulnerability of the Advantech WebAccess remote monitoring software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Vulnerability of the Server component: The MySQL Server API of the database management system allows a hacker to cause downtime or service failure.

The vulnerability of the MySQL Server component relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the system to become unresponsive or to fail due to network-related issues with the MySQL protocols...

The vulnerability of the LDAP library in the Solaris operating system, which allows a hacker to cause a partial service failure

The vulnerability of the LDAP library in the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a partial service outage...