The vulnerability of Google Chrome’s general access mechanism allows a perpetrator to compromise data integrity.

The vulnerability of the Google Chrome browser’s general access mechanism is related to a bug in the system’s resource management mechanism. Exploiting this vulnerability allows an attacker to influence data integrity through a specially created HTML page...

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software platform allows a hacker to gain full control over the application.

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application through the...

Fedora: Security Advisory for radare2 (FEDORA-2020-aa51efe207)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang (FEDORA-2020-9cd1204ba0)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

FreeRDP < 2.2.0 Integer Overflow Vulnerability

FreeRDP is prone to an integer overflow vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

Fedora: Security Advisory for bashtop (FEDORA-2020-54e4356732)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Information leakage vulnerability in gbase 8a of Tianjin Nanda General Data Technology Co.

GBase 8a is a secure database management system. An information disclosure vulnerability exists in gbase 8a of Tianjin Nanda General Data Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Buffer Overflow Vulnerability in General Electric's Proficy Machine Edition

Proficy Machine Edition is an advanced software development environment and maintenance environment for machine-level automation from GE General Electric. A buffer overflow vulnerability exists in GE's Proficy Machine Edition, which can be exploited by an attacker to construct a malicious link an...

openSUSE: Security Advisory for go1.13 (openSUSE-SU-2020:1087-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Denial of Service Vulnerability in gbase 8a at Tianjin Nanda General Data Technology Co. Ltd (CNVD-2020-48697)

GBase 8a is a secure database management system. A denial of service vulnerability exists in gbase 8a of Tianjin Nanda General Data Technology Co. An attacker could exploit this vulnerability to cause the database to go down...

OSV-2020-909 Heap-buffer-overflow in rasteropGeneralLow

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23960 Crash type: Heap-buffer-overflow READ 4 Crash state: rasteropGeneralLow rasteropLow pixRasterop...

Denial of Service Vulnerability in GBase 8a Database of Tianjin Nanda General Data Technology Co.

GBase 8a is a column-store relational database management system with efficient and complex statistical and analytical capabilities, capable of managing terabytes of data. A denial-of-service vulnerability exists in the GBase 8a database of Tianjin Nanda General Data Technology Company Limited,...

Threat Source newsletter for July 16, 2020

Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. If you haven’t already, we highly recommend you read our in-depth research paper on election security. This paper represents four years of hands-on research, interviews and insight into how things have changed since 2016, and what...

Unspecified Vulnerability in Oracle Fusion Middleware Business Intelligence Enterprise Edition Analytics Web General

Oracle Fusion Middleware Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. business Intelligence Enterprise Edition is one of the components for the...

CVE-2020-14626

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker...

CVE-2020-14548

CVE-2020-14548 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (Analytics Web General). Affected versions are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated, network-accessible attacker (HTTP) to read a subset of data, with exploitation r...

CVE-2020-14548

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

Fedora: Security Advisory for kernel (FEDORA-2020-3c3d1d7006)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 31 Update: ngircd-26-3.fc31

ngIRCd is a free open source daemon for Internet Relay Chat IRC, developed under the GNU General Public License GPL. It's written from scratch and is not based upon the original IRCd like many others...

Fedora: Security Advisory for mediawiki (FEDORA-2020-9c97633708)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...