HP ThinPro 6.x / 7.x Filter Bypass

HP ThinPro - Application filter bypass =============================================================================== Identifiers ------------------------------------------------- CVE-2019-16286 CVSSv3 score ------------------------------------------------- 6.1 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

Glassdoor: IDOR Vulnerability in Job Preferences

An attacker has the ability to change a victim's job preferences through an IDOR vulnerability. The issue exists in the following endpoint: https://www.glassdoor.com/member/profileApi/preferences/delete.htm...

thunderbird security update

68.6.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.6.0-1 - Update to 68.6.0 build2...

firefox security update

68.6.0-1.0.1.el81 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references Orabug: 30530527 68.6.0-1.0.1 - Update to 68.6.0 build1 68.5.0-3 - Added fix for rhbz1805667 - Enabled...

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows a hacker to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system is related to lack of access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or gain unauthorized access to protected information using the HTTPS network...

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Preferences component in the Oracle CRM Technical Foundation system is related to lack of access control. Exploiting this vulnerability allows an attacker to gain access to modify, add, or delete data using the HTTPS network protocol...

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows attackers to access, modify, add, or delete data, as well as gain unauthorized access to protected information.

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system is related to lack of access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or gain unauthorized access to protected information using the HTTPS network...

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows attackers to access, modify, add, or delete data, as well as gain unauthorized access to protected information.

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system is related to lack of access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or gain unauthorized access to protected information using the HTTPS network...

CVE-2020-2651

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CR...

Design/Logic Flaw

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CR...

Design/Logic Flaw

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CR...

Design/Logic Flaw

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CR...

CVE-2020-2653

CVE-2020-2653 affects Oracle E-Business Suite’s CRM Technical Foundation (component: Preferences) with vulnerable versions: 12.1.3 and 12.2.3–12.2.9 . An unauthenticated attacker with network access over HTTPS can compromise the foundation; attacks require user interaction and may impact other pr...

CVE-2020-2653

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CR...

CVE-2020-2653

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite component: Preferences. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle CR...

CVE-2020-2652

CVE-2020-2652 affects Oracle E-Business Suite, specifically the Oracle CRM Technical Foundation component (Preferences). Affected versions are 12.1.3 and 12.2.3–12.2.9. The issue enables an unauthenticated attacker with network access via HTTPS to compromise Oracle CRM Technical Foundation, poten...

CVE-2020-2651

CVE-2020-2651 affects Oracle E-Business Suite's Oracle CRM Technical Foundation (component: Preferences). Concrete affected versions are 12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise Oracle CRM Technical Foundation, with...

Oracle E-Business Suite cpujan2020 Multiple Security Vulnerabilities

Description Oracle E-Business Suite is prone to multiple security vulnerabilities. These vulnerabilities can be exploited over 'HTTPS' protocol. The 'Preferences', 'Message Hooks', 'Attachments / File Upload' components are affected. These vulnerabilities affect the following supported versions:...

firefox security update

68.4.1-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 68.4.1-1 - Update to 68.4.1esr build1 - Update to 68.4.0esr build1 - Fix for wrong intl.acceptlang whe...

CVE-2019-8757

A race condition existed when reading and writing user preferences. This was addressed with improved state handling. This issue is fixed in macOS Catalina 10.15. The "Share Mac Analytics" setting may not be disabled when a user deselects the switch to share analytics...