CVE-2020-14732

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Promotions. The supported version that is affected is 19.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-14731

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Segment. Supported versions that are affected are 18.0 and 19.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-14731

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Segment. Supported versions that are affected are 18.0 and 19.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-14732

The CVE-2020-14732 entry concerns Oracle Retail Customer Management and Segmentation Foundation (Promotions) in version 19.0. The vulnerability allows a low-privilege attacker with network access over HTTP to read a subset of data, indicating a confidentiality impact. Root cause details are not e...

CVE-2020-14731

CVE-2020-14731 affects Oracle Retail Customer Management and Segmentation Foundation (Segment) with vulnerable versions 18.0 and 19.0. The issue is exploitable by a low-privileged attacker over HTTP with network access, leading to unauthorized read access of a subset of data. The connected Red Ha...

CVE-2020-14732

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Promotions. The supported version that is affected is 19.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-14731

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Segment. Supported versions that are affected are 18.0 and 19.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

EulerOS Virtualization 3.0.2.2 : memcached (EulerOS-SA-2020-2208)

According to the versions of the memcached packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The tryreadcommand function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service...

EulerOS Virtualization 3.0.2.2 : qemu-kvm (EulerOS-SA-2020-2200)

According to the version of the qemu-kvm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The qemu-nbd server in QEMU aka Quick Emulator, when built with the Network Block Device NBD Server support, allows remote attacke...

Unspecified Vulnerability in Unisys Stealth (core)

The unisys stealthcore is a firewall from Unisys. This firewall is easy to configure and expand, can be upgraded by micro-segmentation, and fully protects internal data security. A security vulnerability exists in Unisys Stealthcore versions prior to 4.0.134 that stems from storing passwords in a...

Fix of 227 CVE

Fix bug 69720: Null pointer dereference in phargetfpoffset - Fix bug 70728: Type Confusion Vulnerability in PHPtoXMLRPCworker - Fix bug 70661: Use After Free Vulnerability in WDDX Packet Deserialization - Fix bug 70741: Session WDDX Packet Deserialization Type Confusion Vulnerability - Fix bug...

motion -- Denial of Service

cxsecurity.com reports: A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request...

Debian DLA-2377-1 : qt4-x11 security update

Several vulnerabilities were fixed in qt4-x11, the legacy version of the Qt toolkit. CVE-2018-15518 Double-free or corruption in QXmlStreamReader during parsing of a specially crafted illegal XML document. CVE-2018-19869 A malformed SVG image causes a segmentation fault. CVE-2018-19870 A malforme...

EulerOS Virtualization for ARM 64 3.0.6.0 : glibc (EulerOS-SA-2020-2019)

According to the version of the glibc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An exploitable signed comparison vulnerability exists in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling...

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2020-2059)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The RaggedCountSparseOutput implementation does not validate that the input arguments form a valid ragged tensor, allowing an attacker to exploit the vulnerability to cause an application crash via a segmentation fault from a heap-based buffer overfl...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. A NULL pointer dereference in the linked snippet in eager mode allows an attacker to crash the application via segmentation fault when ctx-sessionstate returns nullptr...

EulerOS 2.0 SP3 : sqlite (EulerOS-SA-2020-2059)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a...

EulerOS 2.0 SP3 : nss (EulerOS-SA-2020-2100)

According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the...

Google TensorFlow code issue vulnerability (CNVD-2020-54473)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in TensorFlow eager mode versions prior to 1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1, and 2.3.1, which can be exploited by attackers to cause segmentation errors...