CVE-2018-2868

Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite subcomponent: General Utilities. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

Design/Logic Flaw

Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite subcomponent: General Utilities. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

CVE-2018-2870

CVE-2018-2870 affects Oracle E-Business Suite, specifically the Human Resources General Utilities component. Affected versions are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. The vulnerability is exploitable over HTTP with no authentication, enabling an attacker with networ...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-09039)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-09038)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-09040)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and other management software collection, is a seamlessly integrated management suite. An unspecified...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-09037)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

[SECURITY] Fedora 28 Update: net-snmp-5.7.3-36.fc28

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

[SECURITY] Fedora 27 Update: advancecomp-2.1-4.fc27

AdvanceCOMP is a set of recompression utilities for .PNG, .MNG and .ZIP fil es. The main features are : Recompress ZIP, PNG and MNG files using the Deflate 7-Zip implementation. Recompress MNG files using Delta and Move optimization. This package contains: advzip - Recompression and test utility...

[SECURITY] Fedora 27 Update: util-linux-2.30.2-2.fc27

The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, Util-linux contains the fdisk configuration tool and the login program...

Solaris 10 (x86) : 119255-92

SunOS 5.10x86: Install and Patch Utilities Patch. Date this patch was last updated by Sun : Jun/11/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Solaris 10 (sparc) : 152264-01

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Utilities. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via RPC to compromise Solaris. Successful attacks of this...

Solaris 10 (sparc) : 119254-91

SunOS 5.10: Install and Patch Utilities Pa. Date this patch was last updated by Sun : Feb/23/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (sparc) : 148768-02

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Text Utilities. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized read...

Solaris 10 (x86) : 148769-02

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Text Utilities. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized read...

Denial of service vulnerability in GNU binutils 'display_debug_ranges' function

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A denial of service vulnerability exis...

Etherpad Lite Cross-Site Scripting Vulnerability

Etherpad Lite is the Etherpad Foundation's suite of open source rich text online collaboration software. A cross-site scripting vulnerability exists in the static/js/padutils.js file in Etherpad Lite versions prior to 1.6.3. A remote attacker can use window.location.href to inject arbitrary Web...

GNU Binutils Denial of Service Vulnerability (CNVD-2018-05207)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A denial of service vulnerability exists in GNU Binutils 2.30. The vulnerability arises because the coffpointerizeaux function in coffgen.c in the...

Debian DLA-1281-1 : advancecomp security update

Joonun Jang discovered that the advzip tool in advancecomp, a collection of recompression utilities, was prone to a heap-based buffer overflow. This might allow an attacker to cause a denial of service application crash or other unspecified impact via a crafted file. For Debian 7 'Wheezy', these...

February 9, 2018 – Morning Cyber Coffee Headlines – “Opening Ceremony” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! February 9, 2018 - Headlines Carbon Black in the News: 10 Questions Today’s CEO...