PT-2020-1460

Name of the Vulnerable Software and Affected Versions Oracle Human Resources versions 12.1.1 through 12.1.3 Oracle Human Resources versions 12.2.3 through 12.2.9 Description The issue exists due to insufficient input validation in the Hierarchy Diagrammers component of Oracle Human Resources...

PT-2020-1459

Name of the Vulnerable Software and Affected Versions Oracle Human Resources versions 12.1.1 through 12.1.3 Oracle Human Resources versions 12.2.3 through 12.2.9 Description The issue exists due to insufficient input validation in the Hierarchy Diagrammers component of Oracle Human Resources. Thi...

PT-2020-1591

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to a vulnerability in the Oracle Email Center product, specifically in the Message Display component...

PT-2020-1455

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite component: Shopping Cart versions 12.1.1 through 12.1.3 Oracle E-Business Suite component: Shopping Cart versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Shopping Cart...

Oracle E-Business Suite cpujan2020 Multiple Security Vulnerabilities

Description Oracle E-Business Suite is prone to multiple security vulnerabilities. These vulnerabilities can be exploited over 'HTTPS' protocol. The 'Message Display', 'Shopping Cart', 'Others', 'Call Phone Number Page', 'Wireless' components are affected. These vulnerabilities affect the followi...

PT-2020-1469

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle One-to-One Fulfillment product, specifically in the Call...

Oracle E-Business Suite cpujan2020 Multiple Security Vulnerabilities

Description Oracle E-Business Suite is prone to multiple security vulnerabilities. These vulnerabilities can be exploited over 'HTTPS' protocol. The 'Preferences', 'Message Hooks', 'Attachments / File Upload' components are affected. These vulnerabilities affect the following supported versions:...

PT-2020-1403

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle iSupport product, allowing an unauthenticated attacker wi...

PT-2020-1411

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Preferences component of Oracle CRM Technical Foundation, allowing an unauthenticated attacker with network...

PT-2020-1588

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient access control in the Message Display component of Oracle Email Center. It allows an...

PT-2020-1585

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.5 through 12.2.9 Description The issue is related to insufficient access control in the Attachments / File Upload component of the Oracle Applications Framework product. It allows an unauthenticated attack...

PT-2020-1584

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle iSupport component of Oracle E-Business Suite. Exploitati...

PT-2020-1415

Name of the Vulnerable Software and Affected Versions Java SE versions 11.0.5 and 13.0.1 Description The issue is related to a vulnerability in the Java Secure Socket Extension JSSE component of Oracle Java SE, which is difficult to exploit and allows an unauthenticated attacker with network acce...

PT-2020-1404

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite component: Others versions 12.1.1 through 12.1.3 Oracle E-Business Suite component: Others versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Oracle iSupport product,...

PT-2020-1506

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient access control in the Attachments / File Upload component of the Oracle Applications Framework product. It allows an...

PT-2020-1468

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient access control in the Message Hooks component of Oracle CRM Technical Foundation, allowing an unauthenticated attacker with...

messagehero.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1067357 Security Researcher geeknik Helped patch 8710 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting messagehero.com website an...

EulerOS Virtualization for ARM 64 3.0.5.0 : curl (EulerOS-SA-2020-1070)

According to the versions of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP,...

openSUSE: Security Advisory for rmt-server (openSUSE-SU-2019:1824-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

ALPINE-CVE-2019-17002

If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was not upgraded to https. This vulnerability affects Firefox 70...