CVE-2019-2629

Vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications subcomponent: User Interface. The supported version that is affected is 2.4.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2019-2629

Vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications subcomponent: User Interface. The supported version that is affected is 2.4.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2019-2629

Vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications subcomponent: User Interface. The supported version that is affected is 2.4.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2019-2629

The CVE-2019-2629 entry concerns Oracle Health Sciences Data Management Workbench (UI subcomponent) within Oracle Health Sciences Applications, affected in version 2.4.8. The vulnerability allows a low-privileged attacker with network access over HTTP to compromise the system, enabling unauthoriz...

Oracle Health Sciences Applications Health Sciences Data Management Workbench Access Control Error Vulnerability

Oracle Health Sciences Applications is a suite of Oracle's clinical development solutions for the healthcare industry, of which Health Sciences Data Management Workbench is a component that provides end-to-end clinical data management capabilities. An access control error vulnerability exists in...

CVE-2019-0282

Several web pages in SAP NetWeaver Process Integration Runtime Workbench, fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; can be accessed without user authentication, which might expose internal data like release information, Java package and Java object names which can be misused by the...

CVE-2019-0282

The CVE-2019-0282 case concerns SAP NetWeaver Process Integration (Runtime Workbench) information disclosure. Multiple sources confirm that several pages can be accessed without user authentication, exposing internal data such as release information, Java package names, and Java object names. The...

WIBU SYSTEMS AG WibuKey Digital Rights Management (Update B)

1. EXECUTIVE SUMMARY CVSS v3 10.0 --------- Begin Update B Part 1 of 4 --------- ATTENTION: Exploitable remotely/low skill level to exploit/public exploits available Vendor: WIBU-SYSTEMS AG Equipment: WibuKey Digital Rights Management DRM --------- End Update B Part 1 of 4 ---------...

Volatility Workbench - A GUI For Volatility Memory Forensics

Volatility Workbench is a graphical user interface GUI for the Volatility tool. Volatility is a command line memory analysis and forensics tool for extracting artifacts from memory dumps. Volatility Workbench is free, open source and runs in Windows. It provides a number of advantages over the...

ABB Mint WorkBench Detection (Windows SMB Login)

Detects the installed version of ABB Mint WorkBench for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DRUPAL-CONTRIB-2018-067

The Workbench Moderation module adds arbitrary moderation states to Drupal core's "unpublished" and "published" node states, and affects the behavior of node revisions when nodes are published. In some conditions, content moderation fails to check a users access to use certain transitions, leadin...

Workbench Moderation - Moderately critical - Access bypass - SA-CONTRIB-2018-067

The Workbench Moderation module adds arbitrary moderation states to Drupal core's "unpublished" and "published" node states, and affects the behavior of node revisions when nodes are published. In some conditions, content moderation fails to check a users access to use certain transitions, leadin...

CVE-2016-7041

Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host...

Path traversal

Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host...

CVE-2016-7041

Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host...

CVE-2016-7041

Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host...

CVE-2016-7041

CVE-2016-7041 is a path traversal vulnerability in Red Hat Drools Workbench / Drools components used with Red Hat JBoss BPM Suite/BRMS. The flaw allows a remote, authenticated attacker to bypass directory restrictions and read arbitrary files on the affected host. Connected Red Hat advisories (RH...

PT-2018-4969 · Red Hat · Drools Workbench

Name of the Vulnerable Software and Affected Versions: Drools Workbench affected versions not specified Description: The issue allows a remote, authenticated attacker to bypass directory restrictions and retrieve arbitrary files from the affected host due to a path traversal vulnerability...

Assessing Linux Security Configurations with SCAP Workbench

Recently I had a chance to work with OpenSCAP. It's a set of free and open-source tools for Linux Configuration Assessment and a collection security content in SCAP Security Content Automation Protocol format. In this post I will write about SCAP Workbench. It is a GUI application that can check...

Oracle MySQL Server Component Information Disclosure Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a database server component. A security vulnerability exists in the Workbench: Security: Encryption subcomponent of the MySQL Server 5.5.60 and earlier, 5.6.40 and...