PT-2018-1397

Name of the Vulnerable Software and Affected Versions Oracle Business Process Management Suite versions 11.1.1.7.0 through 12.2.1.3.0 Description The issue is related to inadequate access control in the Process Analysis & Discovery component, allowing an unauthenticated attacker with network acce...

PT-2018-1409

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue is related to insufficient access control in the Oracle CRM Technical Foundation component, specifically in the Preferences...

PT-2018-1404

Name of the Vulnerable Software and Affected Versions Oracle Database versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18.1, and 18.2 Description The issue is related to insufficient access control in the Core RDBMS component of Oracle Database Server. It can be easily exploited by a low-privileged attacke...

Singularity Information Disclosure Vulnerability

Singularity is a Linux-based container platform for running standalone applications. A security vulnerability exists in Singularity versions 2.3.0 through 2.5.1, which arises from the program's failure to perform proper access control on the overlay file system supported by the system. The...

Debian: Security Advisory (DLA-1414-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : mercurial (EulerOS-SA-2018-1178)

According to the versions of the mercurial package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. - Securi...

CVE-2018-1000511

WP ULike version 2.8.1, 3.1 contains a Incorrect Access Control vulnerability in AJAX that can result in allows anybody to delete any row in certain tables. This attack appear to be exploitable via Attacker must make AJAX request. This vulnerability appears to have been fixed in 3.2...

OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

PT-2018-10213

Name of the Vulnerable Software and Affected Versions Pie Register plugin versions prior to 3.0.10 Description The issue allows remote attackers to execute arbitrary SQL commands via the invitation codes grid, potentially leading to unauthorized data access or modification. Recommendations For...

Security Bulletin: Bypass security restrictions in WebSphere Application Server (CVE-2016-0385)

Summary There is a potential bypass security restriction vulnerability in IBM WebSphere Application Server. This will only occur in environments that have the webcontainer custom property HttpSessionIdReuse enabled. Vulnerability Details CVEID: CVE-2016-0385 DESCRIPTION: IBM WebSphere Application...

Dingwei iPower CMS has multiple vulnerabilities

Dingwei iPower CMS is a website system developed by Chongqing Dingwei Network Technology Co. Dingwei iPower CMS exists SQL injection, XSS cross-site scripting vulnerabilities, the background management system also exists user guessing, ultra-rights access and other vulnerabilities, attackers can...

EulerOS 2.0 SP1 : mercurial (EulerOS-SA-2018-1142)

According to the versions of the mercurial package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. - Securi...

Sql injection

Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, may lead to unauthorized disclosure of data...

PT-2018-2351

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue is related to insufficient access control in the Attachments / File Upload component of the Oracle Application Object Library. This can be...

Malicious Package

Overview Version 0.4.8 of s3asy contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.4.8 of this module is found installed you...

Oracle Retail Applications Retail Integration Bus Component Unauthorized Operation Vulnerability

Oracle Retail Applications is a set of retail application store solutions from Oracle Corporation. Retail Integration Bus is one of the components that provides real-time messaging for retailers' surveys. A security vulnerability exists in the RIB Kernal Apache Commons Collections subcomponent of...

Oracle Hospitality Applications Hospitality Guest Access Component Unauthorized Operation Vulnerability

Oracle Hospitality Applications is a set of business applications, servers and storage solutions for hospitality management from Oracle. The solution provides human resources cost management, provide customers with the entire journey to track the management of services to improve customer...

Oracle Financial Services Applications Financial Services Basel Regulatory Capital Internal Ratings Based Approach component unauthorized operation vulnerability (CNVD-2018-11043 )

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Financial Services Basel Regulatory Capital Internal Ratings Based Approach is one of the components of the Basel Regulatory Capital...

CVE-2018-4849

The CVE-2018-4849 vulnerability affects Siemens Siveillance VMS Video Mobile Apps for Android and iOS (versions before 12.1a 2018 R1). It stems from improper certificate validation, enabling a privileged network attacker to read and write data on the encrypted channel between the app and its serv...

Oracle Outside In Technology Component Remote Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...