PT-2019-1872

Name of the Vulnerable Software and Affected Versions Java SE versions 7u211, 8u202, 11.0.2, 12 Java SE Embedded version 8u201 Description The issue is related to the RMI component of Oracle Java SE and Java SE Embedded, which is associated with inadequate access control. This allows an...

PT-2019-1944

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Print Server subcomponent of Oracle One-to-One Fulfillment. It allow...

PT-2019-1883

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.2.8 Description The issue is related to inadequate access control in the Marketing Administration component of Oracle Marketing, part of the Oracle E-Business Suite system. This can be exploit...

PT-2019-1880

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle CRM Technical Foundation component, specifically in the Preferences...

PT-2019-1943

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle Marketing component, specifically the Marketing Administratio...

PT-2019-2020

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Description The issue is related to inadequate access control in the WLS Core Components subcomponent of Oracle WebLogic Server, allowing a low-privileged attacker with network...

PT-2019-1929

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0 Description The issue is related to insufficient access control in the WLS Core Components of Oracle WebLogic Server, allowing a remote attacker to modify, add, or delete...

PT-2019-19970

Name of the Vulnerable Software and Affected Versions DASAN H660RM devices with firmware 1.03-0022 Description The issue concerns the use of a hard-coded key for logs encryption in the affected devices. This means that data stored using this key can be decrypted by anyone who gains access to the...

CVE-2019-8988

The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site contains a vulnerability that theoretically allows a user to escalate their privileges on the affected system, in a way that may allow for data...

com.thinkbiganalytics.kylo:kylo-kerberos-test-client (0.9.1), org.apache.hive.hcatalog:hive-hcatalog-core (0.14.0) +13 more potentially affected by CVE-2016-3083 via org.apache.hive:hive-exec (0.14.0)

org.apache.hive:hive-exec MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.thinkbiganalytics.kylo:kylo-kerberos-test-client 0.9.1 - org.apache.hive.hcatalog:hive-hcatalog-core...

Google Chrome Reflect.construct Information Disclosure

The vulnerability of the Reflect.construct processing mechanism in Google Chrome’s JavaScript scripting engine is related to memory-walking attacks. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information through a specially crafted HTML page...

Joomla Geommunity3es 1.4 SQL Injection

Exploit Title : Joomla Geommunity3es Components 1.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : nordmograph.com Software Download Link : nordmograph.com/extensions /index.php?option=comvirtuemart&view=productdetails...

LibVNCServer rfbproto Heap Buffer Overflow DoS

The vulnerability of the rfbproto.c component of the cross-platform library LibVNCServer is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures and gain unauthorized access to confidential data...

LibVNCServer rfbserver Heap Buffer Overflow DoS

The vulnerability of the rfbserver.c component of the cross-platform library LibVNCServer is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and gain unauthorized access to confidential data...

LFTP Oracle Solaris Unauthorized Access

The vulnerability of the LFTP component in the Oracle Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to data using the FTP protocol...

WebCenter Spaces Unauthorized Access

The vulnerability of the WebCenter Spaces Application web platform’s Oracle WebCenter Portal relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Portal Component Unauthorized Access

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to data using the HTTP protocol...

Performance Monitor Component Unauthorized Access

The vulnerability of the Performance Monitor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to data using the HTTP protocol...

WebCenter Spaces Unauthorized Access

The vulnerability of the WebCenter Spaces Application component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data using the HTTP protocol...

PeopleSoft Enterprise Interaction Hub Unauthorized Access

The vulnerability of the Application Portal component of the PeopleSoft Enterprise Interaction Hub software solution is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the...