Heap overflow

RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sensitive key material...

Code injection

RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during PKCS 1 unpadding operations, also known as a Bleichenbacher attack. A remote attacker may be able to recover a RSA key...

CVE-2018-11068

CVE-2018-11068 affects RSA BSAFE SSL-J before 6.2.4, describing a Heap Inspection vulnerability that could let an attacker with physical access recover sensitive key material. The connected NVD entry confirms the impact as confidential data exposure (HIGH) with physical access required and LOCAL ...

CVE-2018-11070

Affected software: RSA BSAFE Crypto-J and RSA BSAFE SSL-J. Vulnerable components are the PKCS #1 unpadding path that enables a covert timing channel (Bleichenbacher-style) attack. Versions prior to 6.2.4 for both Crypto-J and SSL-J are impacted. Impact: a remote attacker could potentially recover...

CVE-2018-11068

RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sensitive key material...

CVE-2018-11069

RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption. A remote attacker may be able to recover a RSA key...

CVE-2018-11069

RSA BSAFE SSL-J versions prior to 6.2.4 are affected by a covert timing channel vulnerability in RSA decryption (Bleichenbacher-style). A remote attacker could potentially recover an RSA key. The vulnerability is documented across multiple sources as affecting RSA BSAFE SSL-J up to 6.2.3. Exploit...

j-pea.org XSS vulnerability

Open Bug Bounty ID: OBB-675041 Description| Value ---|--- Affected Website:| j-pea.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

j-c-associates.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-673300 Description| Value ---|--- Affected Website:| j-c-associates.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

j-bma.or.jp XSS vulnerability

Open Bug Bounty ID: OBB-673217 Description| Value ---|--- Affected Website:| j-bma.or.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

j-learning.com XSS vulnerability

Open Bug Bounty ID: OBB-665111 Description| Value ---|--- Affected Website:| j-learning.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ubuntu 14.04 LTS / 16.04 LTS : GnuPG vulnerability (USN-3733-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3733-1 advisory. Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom...

J-Business Directory,4.9.3,SQL Injection

jBusiness Directory from CMS Junkie,4.9.3 and previous versions, SQL Injection, XSS resolution: update to 4.9.4 update notice: http://www.cmsjunkie.com/blog/joomlabusinessdirectory4-9-4release/ Note that the developer did not inform the VEL...

Unspecified Vulnerability in Oracle Retail Applications MICROS Retail-J

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. MICROS Retail-J is one of the advanced retail system components. An unspecified vulnerability exists in Oracle Retail Applications MICROS Retail-J. An attacker could use this...

Unspecified Vulnerability in Oracle Retail Applications MICROS Retail-J Component (CNVD-2018-21107)

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. MICROS Retail-J is one of the advanced retail system components. A security vulnerability exists in the Interfaces subcomponent of the MICROS Retail-J component of Oracle Retail...

Unspecified Vulnerability in Oracle Retail Applications MICROS Retail-J Component

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. MICROS Retail-J is one of the advanced retail system components. A security vulnerability exists in the Database subcomponent of the MICROS Retail-J component of Oracle Retail...

j-depo.com XSS vulnerability

Open Bug Bounty ID: OBB-649888 Description| Value ---|--- Affected Website:| j-depo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-2881

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Database. Supported versions that are affected are 11.0.x, 12.0.x, 12.1.x, 12.1.1.x, 12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Code injection

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Database. Supported versions that are affected are 11.0.x, 12.0.x, 12.1.x, 12.1.1.x, 12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Interfaces. Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x,12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...