CVE-2019-2886

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Services. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks require hum...

CVE-2019-2886

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Services. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks require hum...

Design/Logic Flaw

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Services. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks require hum...

CVE-2019-2886

The CVE-2019-2886 entry concerns Oracle Forms (component: Services) within Oracle Fusion Middleware, affected version 12.2.1.3.0. The vulnerability is described as easily exploitable with network access via HTTP, allowing an unauthenticated attacker to compromise Oracle Forms, with successful att...

CVE-2019-2886

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Services. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks require hum...

Unspecified Vulnerability in Oracle Forms

Oracle Forms is a software product for creating screens for interacting with the Oracle database. An unspecified vulnerability exists in the Services component in Oracle Forms 12.2.1.3.0. An attacker could exploit the vulnerability to compromise confidentiality and integrity...

Adobe Experience Manager Forms Cross-Site Scripting Vulnerability (CNVD-2019-37118)

Adobe Experience Manager AEM Forms is an enterprise document and forms platform that lets you capture and process information, deliver personalized communications, and protect and track sensitive information. A reflected cross-site scripting vulnerability exists in Adobe Experience Manager Forms...

Adobe Releases Out-of-Band Security Patches for 82 Flaws in Various Products

No, it's not a patch Tuesday. It's the third Tuesday of the month, and as The Hacker News shared an early heads-up late last week on Twitter, Adobe today finally released pre-announced out-of-band security updates to patch a total of 82 security vulnerabilities across its various products. The...

Oracle Forms CVE-2019-2886 Remote Security Vulnerability

Description Oracle Forms is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Services' component is affected. This vulnerability affects the following supported versions: 12.2.1.3.0 Technologies Affected Oracle Forms 12.2.1.3.0...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

Adobe Acrobat Reader DC XFA Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

Adobe Acrobat Reader DC XFA closeDoc Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of th...

Adobe Acrobat Reader DC XFA Form Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Acroba...

APSB19-50 Security updates available for Adobe Experience Manager Forms

Adobe has released security updates for Adobe Experience Manager Forms. These updates resolve a stored cross-site scripting vulnerability rated Important that could result in sensitive information disclosure...

WordPress gravity-forms-sms-notifications plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gravity-forms-sms-notifications is a short message alert plugin used in it. A cross-site scripting vulnerability exists in the WordPre...

CVE-2019-17399

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment...

CVE-2019-17399

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment...

Path traversal

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment...

CVE-2019-17399

The CVE-2019-17399 entry concerns the Shack Forms Pro extension for Joomla! (pre-4.0.32). The connected sources confirm a path traversal vulnerability triggered by a file attachment, affecting Joomla! installations using Shack Forms Pro before 4.0.32. The core issue is a file-path traversal flaw ...

CVE-2019-17399

The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment...