Oracle E-Business Suite CVE-2019-3022 Remote Security Vulnerability

Description Oracle E-Business Suite is prone to a remote security vulnerability in Oracle Content Manager. The vulnerability can be exploited over the 'HTTP' protocol. The 'Content' component is affected. This vulnerability affects the following supported versions: 12.1.1 through 12.1.3 and 12.2....

PT-2019-3753 · Oracle · Adf +2

Name of the Vulnerable Software and Affected Versions: Oracle JDeveloper and ADF versions 11.1.1.9.0 through 12.2.1.3.0 Description: The issue is related to insufficient access control in the OAM component of Oracle JDeveloper and ADF, allowing a remote attacker to gain unauthorized access to...

Oracle E-Business Suite CVE-2019-3027 Remote Security Vulnerability

Description Oracle E-Business Suite is prone to a remote security vulnerability in 'Oracle Application Object Library' product. This vulnerability can be exploited over the 'HTTP' protocol. The 'Login Help' component is affected. This vulnerability affects the following supported versions: 12.2.5...

Oracle E-Business Suite CVE-2019-3024 Remote Security Vulnerability

Description Oracle E-Business Suite is prone to a remote security vulnerability in Oracle Installed Base. The vulnerability can be exploited over the 'HTTP' protocol. The 'Engineering Change Order' component is affected. This vulnerability affects the following supported versions: 12.2.3 through...

Oracle E-Business Suite CVE-2019-2930 Remote Security Vulnerability

Description Oracle E-Business Suite is prone to a remote security vulnerability in Oracle Field Service. The vulnerability can be exploited over the 'HTTP' protocol. The 'Wireless' component is affected. This vulnerability affects the following supported versions: 12.1.1 through 12.1.3 and 12.2.3...

Oracle Enterprise Manager CVE-2019-2895 Remote Security Vulnerability

Description Oracle Enterprise Manager is prone to a remote security vulnerability in Enterprise Manager for Exadata. The vulnerability can be exploited over the 'HTTP' protocol. The 'Exadata Plug-In Deploy and Ins' component is affected. This vulnerability affects the following supported versions...

Oracle E-Business Suite CVE-2019-2925 Remote Security Vulnerability

Description Oracle E-Business Suite is prone to a remote vulnerability in Oracle Workflow. The vulnerability can be exploited over the 'HTTP' protocol. The 'Worklist' component is affected. This vulnerability affects the following supported versions: 2.1.3, 12.2.3 through 12.2.8 Technologies...

Oracle PeopleSoft Enterprise PeopleTools Multiple Remote Security Vulnerabilities

Description Oracle PeopleSoft Enterprise PeopleTools is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. These vulnerabilities affect the following supported versions: 8.56, 8.57 Technologies Affected Oracle PeopleSoft Enterprise...

Oracle WebLogic Server CVE-2019-2889 Remote Security Vulnerability

Description Oracle WebLogic Server is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Sample apps' component is affected. This vulnerability affects the following supported versions: 12.2.1.3.0 Technologies Affected Oracle Weblogic Serve...

Oracle Hyperion Data Relationship Management CVE-2019-2927 Remote Security Vulnerability

Description Oracle Hyperion Data Relationship Management is prone to a remote security vulnerability. The vulnerability can be exploited over HTTP protocol. This issue affects the 'Access and Security' component. This vulnerability affects the following supported versions: 11.1.2.4 Technologies...

Oracle Web Services CVE-2019-2907 Remote Security Vulnerability

Description Oracle Web Services is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'SOAP with Attachments API for Java' component is affected. This vulnerability affects the following supported versions: 12.2.1.3.0 Technologies Affected...

Oracle Hyperion Financial Reporting CVE-2019-2959 Remote Security Vulnerability

Description Oracle Hyperion Financial Reporting is prone to a remote security vulnerability in Security Models. The vulnerability can be exploited over the 'HTTP' protocol. This vulnerability affects the following supported versions: 11.1.2.4 Technologies Affected Oracle Hyperion Financial...

CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

Code injection

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...

LY Corporation: Get-based SSRF limited to HTTP protocol on https://resizer.line-apps.com/form

A SSRF in the resizer's /form endpoint allowed for leaking HTTP protocol based information from our internal network. The vulnerability could be used to scan ports and get service banners like SSH versions etc, but it was also possible to leak images available on the internal network. If an...

HTTP/2: 0-length headers lead to denial of service

A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially...