CVE-2021-2057

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 19.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2021-2057

CVE-2021-2057 affects Oracle Retail Customer Management and Segmentation Foundation (Internal Operations) in the 19.0 release. The vulnerability enables a low-privileged, network-accessible attacker (HTTP) to modify and read data within the affected component and potentially cause partial denial ...

CVE-2021-2057

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 19.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Oracle Retail Customer Management and Segmentation Foundation Access Control Error Vulnerability

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation Oracle. The product includes inventory management, sales management and customer management, etc. Retail Customer Management and Segmentation Foundation is one of the retail customer management...

5 Surprising Cybersecurity Features of Guardicore Centra

Check out these features around segmentation and visibility that can help working with Guardicore Centra even simpler...

Guardicore Insight: Adding Best-in-Class Osquery Visibility to Secure Your Workloads

What if you had a single solution that was able to detect non-compliant and high-risk endpoints and servers, assess their level of exposure, and then immediately secure these servers and endpoints with laser-sharp segmentation policies?...

Oracle Retail Applications 组件安全漏洞

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation Oracle. The product includes inventory management, sales management and customer management, etc. Retail Customer Management and Segmentation Foundation is one of the retail customer management...

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2021-1046)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Innokas Yhtymä Oy Vital Signs Monitor

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Innokas Yhtymä Oy Equipment: Vital Signs Monitor VC150 Vulnerabilities: Cross-site Scripting, Improper Neutralization of Special Elements in Output Used by a Downstream Component 2. RISK EVALUATION...

CVE-2019-25013

A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability...

Genivia gSOAP WS-Addressing plugin denial-of-service vulnerability

Summary A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Genivia gSOAP 2.8.107 Product UR...

EulerOS Virtualization for ARM 64 3.0.2.0 : qemu-kvm (EulerOS-SA-2021-1046)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in...

[SECURITY] [DSA 4809-2] python-apt regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4809-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 27, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4809-2] python-apt regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4809-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 27, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2488-2] python-apt regression update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2488-2 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 26, 2020 https://wiki.debian.org/LTS -...

CVE-2020-35716

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to cause a persistent denial of service segmentation fault via a long /goform/langSwitch langSelectionOnly parameter...

Research & Academic

We introduce a novel machine learning approach that uses network flows to generate application-level representation of public and private cloud networks. This will greatly simplify the journey to a micro-segmented network...

Envoy has an unspecified vulnerability

Envoy is an open source distributed proxy server . A security vulnerability exists in versions prior to Envoy 1.16.1 that stems from incorrect handling of dropped and truncated datagrams, as evidenced by a UDP packet size greater than 1500 segmentation error. No details of the vulnerability are...

MGASA-2020-0459 Updated sam2p package fixes security vulnerabilities

In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp. CVE-2017-14628. In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element. CVE-2017-14629. In...

Updated sam2p package fixes security vulnerabilities

In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp. CVE-2017-14628. In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element. CVE-2017-14629. In...