4178 matches found
Unspecified Vulnerability in Open-source Ticket Request System Help Desk (CNVD-2019-42577)
Open-source Ticket Request System OTRS is an open-source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone, email, etc. into different queues and service levels, and service personn...
CVE-2019-18793
Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter...
CVE-2019-18793
Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter...
CVE-2019-18793: Improper Neutralization of Input During Web Page Generation
Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter...
PT-2019-15668
Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 9.5 Description The issue allows for cross-site scripting XSS in the target/locales/tr-TR/help/index.htm endpoint via the fileName parameter. This could potentially lead to malicious script execution...
Description of the security update for Office Online Server: November 12, 2019
None None...
MS15-081: Description of the security update for Office 2013: August 11, 2015
MS15-081: Description of the security update for Office 2013: August 11, 2015 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilities, see...
The vulnerability of the Login Help sub-component of the Oracle Application Object Library, a component of the Oracle E-Business Suite, allows a perpetrator to cause a service failure.
The vulnerability of the Login Help sub-component of the Oracle Application Object Library, a component of the Oracle E-Business Suite, relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions using HTTP...
winrar 5.80 - XML External Entity Injection Exploit
Exploit Title: winrar 5.80 - XML External Entity Injection Exploit Author: albalawi Vendor Homepage: https://win-rar.com/fileadmin/winrar-versions/winrar-x64-58b2.exe Version: 5.80 Tested on: Microsoft Windows Version 10.0.18362.418 64bit POC 1- python -m SimpleHTTPServer listens Port 8000 2- ope...
CVE-2019-3027
The CVE-2019-3027 entry concerns Oracle E-Business Suite’s Oracle Application Object Library (AOL), Login Help component. Affected versions are 12.2.5–12.2.9. The vulnerability is exploitable by an unauthenticated attacker over HTTP with network access, potentially enabling partial denial of serv...
CVE-2019-3027
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Login Help. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...
CVE-2019-3027
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Login Help. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...
CVE-2019-3027: Undefined Security Weakness
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Login Help. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...
Oracle E-Business Suite CVE-2019-3027 Remote Security Vulnerability
Description Oracle E-Business Suite is prone to a remote security vulnerability in 'Oracle Application Object Library' product. This vulnerability can be exploited over the 'HTTP' protocol. The 'Login Help' component is affected. This vulnerability affects the following supported versions: 12.2.5...
PT-2019-3620
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.5 through 12.2.9 Description The issue is related to insufficient access control in the Login Help component of Oracle Application Object Library, allowing an unauthenticated attacker with network access v...
Description of the security update for Office 2010: October 8, 2019
Description of the security update for Office 2010: October 8, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software when the software fails to correctly handle objects in memory. . To learn more about the vulnerability, see...
Description of the security update for SharePoint Enterprise Server 2013: October 8, 2019
None None...
Description of the security update for SharePoint Server 2019 Language Pack: September 10, 2019
None None...
Fedora 29 : nfdump (2019-9013b5e75d)
2019-08-14 - Fix compile issues - Fix output buffer size for lzo1xdecompresssafe 2019-08-07 - Fix VerifyExtensionMap 179 2019-08-06 - Fix compile errors 2019-08-05 - Fix nfdump.1 man page. 175 - Fix off by 1 array. 173 - Fix use after free in ModifyCompressFile - Add bound checks in AddExporterSt...