Aggregator

Okta Threat Intelligence exposes VoidProxy, a new PhaaS platform. Learn how this advanced service uses the Adversary-in-the-Middle technique…

Лазерная технология XXI века встретилась с меловым периодом.

A vulnerability marked as critical has been reported in Oracle Enterprise Manager for Fusion Middleware 13.2/13.3. The impacted element is an unknown function of the component Apache Commons FileUpload. Performing manipulation results in risky cryptographic algorithm. This vulnerability is known as CVE-2018-1000180. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in Oracle Data Integrator 12.2.1.3.0. It has been classified as critical. This affects an unknown function of the component Spring Framework. Performing manipulation results in risky cryptographic algorithm. This vulnerability was named CVE-2018-1000180. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in Oracle Communications Diameter Signaling Router 8.0.0/8.1.0/8.2.0/8.2.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the component IDIH Visualization. The manipulation results in risky cryptographic algorithm. This vulnerability was named CVE-2018-1000180. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability has been found in Oracle API Gateway 11.1.2.4.0 and classified as critical. Affected is an unknown function of the component Bouncy Castle Java Library. Performing manipulation results in information disclosure. This vulnerability is known as CVE-2018-1000180. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability was found in Oracle Managed File Transfer 12.1.3.0.0/12.2.1.3.0. It has been classified as critical. Affected by this issue is some unknown functionality of the component MFT Runtime Server. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2018-1000180. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Oracle SOA Suite 12.1.3.0.0/12.2.1.3.0. It has been declared as critical. This affects an unknown part of the component B2B Engine. The manipulation results in information disclosure. This vulnerability was named CVE-2018-1000180. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle PeopleSoft Enterprise PeopleTools 8.55/8.56/8.57 and classified as critical. Affected is an unknown function of the component Bouncy Castle Java Library. The manipulation results in information disclosure. This vulnerability is cataloged as CVE-2018-1000180. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Oracle Retail Xstore Point of Service 7.0/7.1. This affects an unknown part of the component Xenvironment. This manipulation causes information disclosure. The identification of this vulnerability is CVE-2018-1000180. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Oracle Convergence 3.0.2. This vulnerability affects unknown code of the component Bouncy Castle Java Library. Such manipulation leads to risky cryptographic algorithm. This vulnerability is listed as CVE-2018-1000180. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

A vulnerability classified as critical was found in Oracle WebCenter Portal 11.1.1.9.0/12.2.1.3.0. This impacts an unknown function of the component AntiSamy. Executing manipulation can lead to risky cryptographic algorithm. This vulnerability is handled as CVE-2018-1000180. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Oracle WebLogic Server 12.2.1.3. Affected is an unknown function of the component AntiSamy. The manipulation leads to risky cryptographic algorithm. This vulnerability is uniquely identified as CVE-2018-1000180. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Oracle Retail Convenience and Fuel POS Software 2.8.1. This impacts an unknown function of the component Bouncy Castle Java Library. The manipulation leads to risky cryptographic algorithm. This vulnerability is uniquely identified as CVE-2018-1000180. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability classified as critical was found in Oracle Communications Application Session Controller 3.7.1/3.8.0. This affects an unknown function of the component Bouncy Castle Java Library. Executing manipulation can lead to information disclosure. The identification of this vulnerability is CVE-2018-1000180. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability has been found in Oracle Business Transaction Management 12.1.0 and classified as critical. Affected by this issue is some unknown functionality of the component Bouncy Castle Java Library. Performing manipulation results in information disclosure. This vulnerability was named CVE-2018-1000180. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Oracle Enterprise Repository 12.1.3.0.0. This affects an unknown function of the component OpenSSL. Executing manipulation can lead to risky cryptographic algorithm. The identification of this vulnerability is CVE-2018-1000180. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

从调试到虚拟机，一课打通逆向全链路！

看雪论坛作者ID：之健