Policy Compliance Library Updates, January 2020

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...

CVE-2020-2606

CVE-2020-2606 affects Oracle PeopleSoft Enterprise PeopleTools (PIA Core Technology) in versions 8.56 and 8.57. Affected component: PIA Core Technology within PeopleSoft Enterprise PeopleTools. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleT...

CVE-2020-2576

CVE-2020-2576 refers to the Oracle Outside In Technology vulnerability within Oracle Fusion Middleware (Outside In Filters). Affected is Outside In Filters in 8.5.4; the vulnerability is exploitable remotely over the network via HTTP by an unauthenticated attacker, enabling unauthorized updates/i...

CVE-2020-2542

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2543

CVE-2020-2543 details (Oracle Outside In Technology). The vulnerability affects Oracle Outside In Technology (Outside In Filters) with affected version 8.5.4 in Oracle Fusion Middleware. It allows an unauthenticated attacker with network access via HTTP to potentially update/insert/delete data an...

CVE-2020-2543

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2542

CVE-2020-2542 affects Oracle Outside In Technology (Outside In Filters) in Oracle Fusion Middleware, with the affected 8.5.4 version. The vulnerability can be exploited by an unauthenticated attacker with network access via HTTP to modify data (update/insert/delete) and potentially cause a partia...

CVE-2020-2536

CVE-2020-2536 pertains to Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware. Affected: Outside In Filters in Oracle Outside In Technology code (product family noted as part of the Outside In SDKs); vulnerable version cited as 8.5.4. Access: unauthenticated attacker...

CVE-2020-2540

CVE-2020-2540 concerns Oracle Outside In Technology (Outside In Filters). Connected IBM DOORS Next/Engineering Requirements Management bulletin documents confirm this CVE family is associated with IBM DOORS Next components and outline remediation by upgrading to fixed DOORS Next releases: 7.0 iFi...

Unspecified Vulnerability in Oracle Outside In Technology (CNVD-2020-09666)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...

Unspecified Vulnerability in Oracle Outside In Technology (CNVD-2020-09668)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...

Unspecified Vulnerability in Oracle Outside In Technology (CNVD-2020-09667)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...

Unspecified Vulnerability in Oracle Outside In Technology (CNVD-2020-09670)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...

Oracle Outside In Technology Multiple Remote Security Vulnerabilities

Description Oracle Outside In Technology is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Outside In Filters' component is affected. These vulnerabilities affect the following supported versions: 8.5.4 Technologies Affecte...

CES Surveillance Hype Worries Privacy Advocates

Cutting-edge surveillance tech took center stage at the Consumer Electronics Show in Las Vegas, Nevada this past week. But just as many tech enthusiast praised the technology as something to marvel, privacy advocates voiced concern. Many security experts are sounding the alarm that the annual tec...

Artificial Personas and Public Discourse

Presidential campaign season is officially, officially, upon us now, which means it's time to confront the weird and insidious ways in which technology is warping politics. One of the biggest threats on the horizon: artificial personas are coming, and they're poised to take over political debate...

Lifeline Assistance Phone Users Targeted with 'Uninstallable' Adware

Government-funded, low-cost cell phones are shipping with pre-installed malware aimed at bombing users with unwanted ads, according to researchers. The UMX U686CL Android-based phone, which is made available to low-income citizens in the U.S. via the Lifeline Assistance Program for $35, uses a...

Nantong Home Information Technology Co., Ltd. website building system suffers from SQL injection vulnerability

Nantong Home Information Technology Co., Ltd. is a company that provides online platform services. Nantong Home Information Technology Co., Ltd. building system there is SQL injection, attackers can use the vulnerability to obtain sensitive information server...

SQL Injection Vulnerability in Xinkao Online Marking System of Hebei Xinkao Education Technology Co.

Hebei Xinkao Education Technology Co., Ltd. is a professional high-tech enterprise dedicated to the informatization of educational applications, and has developed the Campus Card Management System, Xinkao Online Marking System and Home-School Interconnection System. Hebei Xinkao Education...

SQL Injection Vulnerability in the Website Building System of Beijing Bolehoo Technology Co.

Beijing Bolehoo Technology Co., Ltd. is a website building company that integrates planning, design, production and technology development. The company is mainly engaged in: UI interface design, program development, H5 interactive design, mobile station development, WeChat secondary development,...