8181 matches found
CVE-2018-3038
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...
CVE-2018-3017
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: Preferences. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...
CVE-2018-2991
Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network...
12 Russian Intelligence Agents Indicted For Hacking DNC Emails
The US Justice Department has announced criminal indictments against 12 Russian intelligence officers tied to the hack of the Democratic National Committee DNC during the 2016 US presidential election campaign. The charges were drawn up as part of the investigation of Russian interference in the...
CVE-2016-9500
Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...
PT-2018-2307
Name of the Vulnerable Software and Affected Versions Sprockets versions 4.0.0.beta7 and lower Sprockets versions 3.7.1 and lower Sprockets versions 2.12.4 and lower Description The issue is related to errors in request processing, allowing a remote attacker to read files outside an application's...
June 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 8.1, RT 8.1, and Server 2012 R2 (KB 4291497)
June 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 8.1, RT 8.1, and Server 2012 R2 KB 4291497 Notice This update is included in the June 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 and...
F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-15638)
F5 BIG-IP is a collection of software and hardware that allows you to control the traffic that passes through your network. A denial of service vulnerability exists in F5 BIG-IP 11.x, 12.x, and 13.x. A remote attacker could exploit this vulnerability by sending specially crafted TLS data to cause...
UBUNTU-CVE-2018-11102
An issue was discovered in Libav 12.3. A read access violation in the movprobe function in libavformat/mov.c allows remote attackers to cause a denial of service application crash, as demonstrated by avconv...
KDE Kwallet kwallet-pam Local Privilege Gain Vulnerability
KDE is a free and open source X desktop management program for Linux and Unix workstations. kde supports a variety of network protocols through the KIO subsystem. kde Kwallet is one of the password credential managers. kwallet-pam is one of the integrated installers. A security vulnerability exis...
SQL Injection Vulnerability in Nagios XI 5.4.12 and Prior (CNVD-2018-09748)
Nagios is an open source, free network monitoring tool that effectively monitors the status of hosts, switches routers and other network devices, printers, etc. for Windows, Linux and Unix. Nagios XI 5.4.12 and earlier versions suffer from a SQL injection vulnerability that can be exploited by...
CVE-2018-2869
Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite subcomponent: General Utilities. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
CVE-2018-2749
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via...
CVE-2018-2742
Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite subcomponent: Framework. Supported versions that are affected are 12.2.2 and 12.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2018-2849
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...
Apple macOS Sierra Kernel Security Bypass Vulnerability (CNVD-2018-08237)
Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security vulnerability exists in the Kernel component of Apple macOS Sierra versions prior to 10.12.4. The vulnerability can be exploited by an attacker to bypass th...
CVE-2016-7472
F5 BIG-IP ASM version 12.1.0 - 12.1.1 may allow remote attackers to cause a denial of service DoS via a crafted HTTP request...
F5 BIG-IP PEM Denial of Service Vulnerability
F5 BIG-IP is an all-in-one network appliance that integrates network traffic management, application security management, load balancing, etc. PEM is one of the policy enforcement managers. A security vulnerability exists in F5 BIG-IP PEM versions 13.0.0 through 13.1.0.3 and 12.0.0 through...
Libav 'av_audio_fifo_size' function null pointer reference vulnerability
Libav formerly FFmpeg is Libav team's set of cross-platform audio and video can be recorded, converted to a solution, which includes a libavcodec encoder. A security vulnerability exists in the 'avaudiofifosize' function in the libavutil/audiofifo.c file in Libav version 12.2. A remote attacker c...