CVE-2019-2610: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2019-16442

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Solaris, resulting in unauthorized read access to a subset of Oracle Solaris accessible data. Recommendations...

CVE-2019-8999

An XML External Entity vulnerability in the UEM Core of BlackBerry UEM versions earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account...

Xxe

An XML External Entity vulnerability in the UEM Core of BlackBerry UEM versions earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account...

CVE-2019-8999

An XML External Entity vulnerability in the UEM Core of BlackBerry UEM versions earlier than 12.10.1a could allow an attacker to potentially gain read access to files on any system reachable by the UEM service account...

PT-2019-19302

Name of the Vulnerable Software and Affected Versions BlackBerry UEM versions prior to 12.10.1a Description The issue is related to an XML External Entity vulnerability in the UEM Core. This could potentially allow an attacker to gain read access to files on any system reachable by the UEM servic...

Security update for tar (moderate)

openSUSE Security Update: Security update for tar Announcement ID: openSUSE-SU-2019:1237-1 Rating: moderate References: 1120610 1130496 Cross-References: CVE-2018-20482 CVE-2019-9923 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description: This...

PT-2019-1937

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to insufficient access controls in the Outside In Filters subcomponent of Oracle Outside In Technology, a suite of software development kits SDKs. This...

PT-2019-2014

Name of the Vulnerable Software and Affected Versions Oracle AutoVue 3D Professional Advanced versions 21.0.0 through 21.0.1 Description The issue is related to inadequate access control in the Format Handling - 2D subcomponent of Oracle AutoVue 3D Professional Advanced, allowing an unauthenticat...

PT-2019-1938

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to insufficient access controls in the Outside In Filters subcomponent of Oracle Outside In Technology, a software development kit SDK. This can be...

PT-2019-3115

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools version 9.2 Description The issue is related to inadequate access control in the Web Runtime component of JD Edwards EnterpriseOne Tools, allowing a low-privileged attacker with network access via HTTP to...

PT-2019-1877

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.28 Oracle VM VirtualBox versions prior to 6.0.6 Description The issue is related to inadequate access control in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with log...

PT-2019-2017

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite version 11.1.1.9.0 Description The issue is related to inadequate access control in the Fabric Layer subcomponent of Oracle SOA Suite, allowing an unauthenticated attacker with network access via HTTP to compromise the system...

PT-2019-1942

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient access control in the Web Catalog subcomponent of Oracle Business Intelligence Enterprise Edition,...

PT-2019-1935

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to insufficient access controls in the Outside In Filters subcomponent of Oracle Outside In Technology, a suite of software development kits SDKs. This...

PT-2019-1936

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology versions 8.5.3 through 8.5.4 Description The issue is related to insufficient access controls in the Outside In Filters subcomponent of Oracle Outside In Technology, a suite of software development kits SDKs. This...

Microsoft Windows 10 1809 - LUAFV Delayed Virtualization MAXIMUM_ACCESS DesiredAccess Privilege Escalation

Microsoft Windows 10 1809 - LUAFV Delayed Virtualization MAXIMUMACCESS DesiredAccess Privilege Escalation Windows: LUAFV Delayed Virtualization MAXIMUMACCESS DesiredAccess EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service...

MikroTik RouterOS Directory Traversal Vulnerability (CVE-2019-3943)

MikroTik RouterOS is prone to an authenticated directory traversal vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2019-11358 · Vmware +1 · Vrealize Automation Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins VMware vRealize Automation Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within job config.xml files on the Jenkins master or controller. These credentials c...

trac-publisher-plugin stores credentials in plain text

trac-publisher-plugin stores credentials unencrypted in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...