CVE-2020-2750

The CVE-2020-2750 entry concerns Oracle E-Business Suite General Ledger, specifically the Account Hierarchy Manager component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability is described as easily exploitable with unauthenticated network access via HTTP, allowing access ...

Buffer Overflow Vulnerability in GE Control System ACTIVEX Control (CNVD-2020-26341)

General Electric GE is a global digital industrial company that creates software-defined machines that are connected, responsive and predictive to transform traditional industries. A buffer overflow vulnerability exists in the ACTIVEX control of the GE control system, which can be exploited by an...

Buffer Overflow Vulnerability in GE Control System ACTIVEX Control (CNVD-2020-26345)

General Electric GE is a global digital industrial company that creates software-defined machines that are connected, responsive and predictive to transform traditional industries. A buffer overflow vulnerability exists in the ACTIVEX control of the GE control system, which can be exploited by an...

Unspecified Vulnerability in Oracle Business Intelligence Enterprise Edition (CNVD-2020-54683)

Oracle Fusion Middleware, the digital business platform for the enterprise and the cloud, is a comprehensive family of middleware products that enable organizations to create and run agile, intelligent business applications and maximize IT efficiencies by leveraging modern hardware and software...

Buffer Overflow Vulnerability in GE Control System ACTIVEX Control (CNVD-2020-26347)

General Electric GE is a global digital industrial company that creates software-defined machines that are connected, responsive and predictive to transform traditional industries. A buffer overflow vulnerability exists in the ACTIVEX control of the GE control system, which can be exploited by an...

Buffer Overflow Vulnerability in GE Control System ACTIVEX Control (CNVD-2020-26344)

General Electric GE is a global digital industrial company that creates software-defined machines that are connected, responsive and predictive to transform traditional industries. A buffer overflow vulnerability exists in the ACTIVEX control of the GE control system, which can be exploited by an...

Buffer Overflow Vulnerability in GE Control System ACTIVEX Control (CNVD-2020-26340)

General Electric GE is a global digital industrial company that creates software-defined machines that are connected, responsive and predictive to transform traditional industries. A buffer overflow vulnerability exists in the ACTIVEX control of the GE control system, which can be exploited by an...

Unspecified Vulnerability in SAP Business Objects Business Intelligence Platform

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. A security vulnerability exists in SAP Business Objects Business...

Squid <= 4.14 Privilege Escalation Vulnerability

Squid is prone to a privilege escalation vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

PT-2020-2531 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 5.5.0.0.0 through 12.2.1.4.0 Description: The issue is related to insufficient access control in the Analytics Web General component of Oracle Business Intelligence Enterprise Edition...

CVE-2020-11704

An issue was discovered in ProVide formerly zFTPServer through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInheritedProperties is Reflected via the groups parameter. GetUserInfo is Reflected via POST data. SetUserInfo is Stored via the general parameter...

Fedora: Security Advisory for rubygem-puma (FEDORA-2020-fd87f90634)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

COVID-19 CISO Checklist for Securing a Remote Workforce

The Coronavirus crisis introduces a heavy burden on the CISO with the joint impact of a mass transition to working remotely coupled with a surge of cyberattacks that strive to monetize the general chaos. Security vendors, unintendedly, contribute to this burden by a relentless generation of noise...

GE Mark VIe Controller Trust Management Issue Vulnerability

The GE Mark VIe Controller is an industrial integrated control system from General Electric GE. A trust management issue vulnerability exists in GE Mark VIe Controller, which stems from the program's use of hard-coded credentials. An attacker could exploit this vulnerability to gain root access t...

GE CIMPLICITY Elevation of Privilege Vulnerability

GE CIMPLICITY is a client/server based HMI/SCADA solution from General Electric GE. The solution is capable of capturing and sharing real-time and historical data across all levels of the enterprise, enabling operational visualization of processes, equipment, and resource monitoring. An elevation...

Secure Remote Working During COVID-19 — Checklist for CISOs

Coronavirus crisis introduces a heavy burden on the CISOs with the collective impact of a mass transition to working remotely coupled with a surge of cyberattacks that strive to monetize the general chaos. Security vendors, unintendedly, contribute to this burden by a relentless generation of noi...

WordPress Contavt Form 7 Datepicker Plugin <= 2.6.0 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.112730";...

Samsung AllShare Server Detection (HTTP)

Checks whether Samsung AllShare Server is present on the target system and if so, tries to figure out the installed version. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora: Security Advisory for drupal8 (FEDORA-2020-51637cf853)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for python-mysql-connector-python (openSUSE-SU-2020:0409-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...