5488 matches found
CVE-2018-2870: Undefined Security Weakness
Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite subcomponent: General Utilities. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-09040)
Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and other management software collection, is a seamlessly integrated management suite. An unspecified...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-09038)
Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-09037)
Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...
UBUNTU-CVE-2018-2825
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require...
PT-2018-15850
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.1.36 Oracle VM VirtualBox versions prior to 5.2.10 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...
PT-2018-15849
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.1.36 Oracle VM VirtualBox versions prior to 5.2.10 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...
PT-2018-15843
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.1.36 Oracle VM VirtualBox versions prior to 5.2.10 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...
PT-2018-15811
Name of the Vulnerable Software and Affected Versions Java SE versions 6u181, 7u171, 8u162, 10 JRockit version R28.3.17 Description The issue allows an unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful attacks...
PT-2018-15848
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.1.36 Oracle VM VirtualBox versions prior to 5.2.10 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-09039)
Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...
CVE-2018-2825
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require...
DARPA Funding in AI-Assisted Cybersecurity
DARPA is launching a program aimed at vulnerability discovery via human-assisted AI. The new DARPA program is called CHESS Computers and Humans Exploring Software Security, and they're holding a proposers day in a week and a half. This is the kind of thing that can dramatically change the...
universalhumanenergy.com XSS vulnerability
Open Bug Bounty ID: OBB-590766 Description| Value ---|--- Affected Website:| universalhumanenergy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Solaris 10 (sparc) : 150400-51
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...
ISPs Caught Injecting Cryptocurrency Miners and Spyware In Some Countries
Governments in Turkey and Syria have been caught hijacking local internet users' connections to secretly inject surveillance malware, while the same mass interception technology has been found secretly injecting browser-based cryptocurrency mining scripts into users' web traffic in Egypt...
humanrightshouse.org XSS vulnerability
Open Bug Bounty ID: OBB-575308 Description| Value ---|--- Affected Website:| humanrightshouse.org Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...
Apple Moves iCloud Data and Encryption Keys for Chinese Users to China
Apple has finally agreed to open a new Chinese data center next month to comply with the country's latest controversial data protection law. Apple will now move the cryptographic keys of its Chinese iCloud users in data centers run by a state-owned company called Cloud Big Data Industrial...
Human Factor Podcast: Jenny Radcliffe and Chris Boyd
A little while ago, I was invited to take part in Jenny Radcliffe's Human Factor Podcast. With 44 episodes strong and counting!, Jenny spends an hour or so talking at length with her guests who are professional investigators, security advocates, all-round educators, tireless consultant/conference...