Potential Security Vulnerabilities With JavaTM SDKs

Abstract Security Bulletin: Asset and Service Mgmt Products - Potential security exposure when using JavaTM based applications due to vulnerabilities in Java Software Developer Kits. See Vulnerability Details for CVE IDs. Content Content VULNERABILITY DETAILS: CVE ID: CVE-2011-3563, CVE-2011-5035...

Security Vulnerabilities Addressed in Asset and Service Mgmt

Abstract Security Bulletin: Security vulnerabilities in Maximo Asset Mgmt, Tivoli Asset Mgmt for IT, Tivoli Service Request Manager, Change and Configuration Mgmt Database. See Vulnerability Details for CVE IDs Content VULNERABILITY DETAILS: CVE ID: CVE-2011-1394, CVE-2011-1395, CVE-2011-1396,...

Security Bulletin: IBM® DB2® LUW contains a vulnerability in which an ALTER TABLE statement may cause the DB2 server to terminate abnormally when AUTO_REVAL is set to IMMEDIATE . (CVE-2014-6159)

Summary IBM DB2 contains a vulnerability in which an ALTER TABLE statement may cause the DB2 server to terminate abnormally when AUTOREVAL is set to IMMEDIATE . This could result in a DB2 server crash; if so, the server would need to be restarted. Vulnerability Details CVE ID: CVE-2014-6159...

The vulnerability of Qualcomm Service Request in the Android operating system, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm Service Request component in the Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Information Disclosure Vulnerability in Multiple IBM Products (CNVD-2018-08000)

IBM Maximo Asset Management and others are products of IBM Corporation in the U.S. Maximo Asset Management and Maximo Asset Management Essentials are comprehensive asset lifecycle and maintenance management solutions.Tivoli Service Tivoli Service Request Manager is an IT service management...

CVE-2017-10174

CVE-2017-10174 concerns a vulnerability in the Oracle iSupport component of Oracle E-Business Suite (Service Request subcomponent). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The issue allows an unauthenticated attacker with network access via HTTP to compromise iSupport, wi...

Oracle iSupport Remote Vulnerability (CNVD-2017-27238)

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the e-business management components...

Oracle iSupport Remote Vulnerability

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the e-business management components...

CVE-2016-5414

FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...

Subaru car software vulnerability analysis—never a failure of token-vulnerability warning-the black bar safety net

Not long ago, one from California car, information security researcher Aaron Guzman, in Australia, held a computer security conference to introduce a black into the Subaru car of the method. In his own 2017 Subaru WRX STI was found in a surprising number of software vulnerabilities, through these...

Oracle Automatic Service Request Unauthorized Access Vulnerability

Oracle Automatic Service Request, which can quickly save the system state when there is a hardware problem, has the ability to safely speed up the diagnostic process, automatic service request generation, and prioritized service request processing. A local security vulnerability exists in the 'AS...

Oracle Automatic Service Request Local Vulnerability (CNVD-2017-08119)

Oracle Automatic Service Request is the ability to quickly save the system state when hardware problems occur, with features such as a secure and accelerated diagnostic process, automatic service request generation, and prioritized service request processing. A local security vulnerability exists...

Oracle Automatic Service Request Local Vulnerability (CNVD-2017-08118)

Oracle Automatic Service Request is the ability to quickly save the system state when hardware problems occur, with features such as a secure and accelerated diagnostic process, automatic service request generation, and prioritized service request processing. A local security vulnerability exists...

Oracle Automatic Service Request Local Vulnerability (CNVD-2017-08075)

Oracle Automatic Service Request is the ability to quickly save the system state when hardware problems occur, with features such as a secure and accelerated diagnostic process, automatic service request generation, and prioritized service request processing. A local security vulnerability exists...

Oracle Automatic Service Request Elevation of Privilege Vulnerability

Oracle Automatic Service Request, which can quickly save the system state when there is a hardware problem, has the ability to safely speed up the diagnostic process, automatic service request generation, and prioritized service request processing. A local security vulnerability exists in the 'AS...

Oracle Automatic Service Request "ASR Manager Denial of Service Vulnerability

Automatic Service Request ASR is a secure, scalable, customer-installable warranty software feature and "Oracle Support Service" that provides automatic case generation in the event of common hardware component failures. A denial of service vulnerability exists in Oracle Automatic Service Request...

CVE-2017-3620

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Reques...

CVE-2017-3619

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Reques...

CVE-2017-3581

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Reques...

CVE-2017-3505

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Automatic Service Reque...