PT-2019-10718

Name of the Vulnerable Software and Affected Versions Oracle Retail Xstore Office versions 7.0 and 7.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Retail Xstore Office, requiring human interaction from a person other than the attacker...

OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: JCE. The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: JCE. The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

Oracle Application Testing Suite Multiple Vulnerabilities (Jul 2019 CPU)

The version of Oracle Application Testing Suite installed on the remote host is affected by multiple vulnerabilities: - A deserialization vulnerability exists in Apache Commons FileUpload library. An unauthenticated, remote attacker can exploit this, via customized Java serialised object, to...

Oracle Java SE 1.7.0_231 / 1.8.0_221 / 1.11.0_4 / 1.12.0_2 Multiple Vulnerabilities (Jul 2019 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 231, 8 Update 221, 11 Update 4, or 12 Update 2. It is, therefore, affected by multiple vulnerabilities: - Unspecified vulnerabilities in the utilities and JCE subcomponents of Oracle...

UBUNTU-CVE-2019-2778

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

PT-2019-2840

Name of the Vulnerable Software and Affected Versions Oracle Clusterware version 12.1.0.2.0 Description The issue is related to insufficient access control in the Trace File Analyzer TFA Collector component of Oracle Clusterware, allowing an unauthenticated attacker with network access via multip...

PT-2019-2847

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.32 Oracle VM VirtualBox versions prior to 6.0.10 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with...

PT-2019-2848

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.32 Oracle VM VirtualBox versions prior to 6.0.10 Description The issue is related to inadequate access control in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with...

PT-2019-2849

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.32 Oracle VM VirtualBox versions prior to 6.0.10 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with...

PT-2019-3415

Name of the Vulnerable Software and Affected Versions Java SE versions 7u221, 8u212, 11.0.3, 12.0.1 Java SE Embedded version 8u211 Description The issue is related to insufficient checks in the Java SE and Java SE Embedded components, specifically in the Utilities subcomponent. This allows an...

PT-2019-4920 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.26 and prior MySQL Server versions 8.0.16 and prior Description: The issue is related to inadequate access control in the MySQL Server component, specifically in the Server: Security: Privileges subcomponent. This...

Denial of service

VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is available...

CVE-2019-5528: Undefined Security Weakness

VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is available...

DEBIAN-CVE-2019-10639

The Linux kernel 4.x starting from 4.1 and 5.x before 5.0.8 allows Information Exposure partial kernel address disclosure, leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols e.g....