|
2018-11-15
|
CVE-2018-5407 |
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'. |
Ubuntu_linux,
Debian_linux,
Node\.js,
Openssl,
Api_gateway,
Application_server,
Enterprise_manager_base_platform,
Enterprise_manager_ops_center,
Mysql_enterprise_backup,
Peoplesoft_enterprise_peopletools,
Primavera_p6_enterprise_project_portfolio_management,
Tuxedo,
Vm_virtualbox,
Enterprise_linux_desktop,
Enterprise_linux_server,
Enterprise_linux_server_aus,
Enterprise_linux_server_eus,
Enterprise_linux_server_tus,
Enterprise_linux_workstation,
Nessus
|
4.7
|
|
|
2018-10-29
|
CVE-2018-0735 |
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1). |
Ubuntu_linux,
Debian_linux,
Cloud_backup,
Cn1610_firmware,
Element_software,
Oncommand_unified_manager,
Santricity_smi\-S_provider,
Smi\-S_provider,
Snapdrive,
Steelstore,
Node\.js,
Openssl,
Api_gateway,
Application_server,
Enterprise_manager_base_platform,
Enterprise_manager_ops_center,
Mysql,
Peoplesoft_enterprise_peopletools,
Primavera_p6_enterprise_project_portfolio_management,
Secure_global_desktop,
Tuxedo,
Vm_virtualbox
|
5.9
|
|
|
2019-01-02
|
CVE-2018-19362 |
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization. |
Debian_linux,
Jackson\-Databind,
Business_process_management_suite,
Primavera_p6_enterprise_project_portfolio_management,
Primavera_unifier,
Retail_workforce_management_software,
Webcenter_portal
|
9.8
|
|
|
|
2019-01-02
|
CVE-2018-19361 |
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization. |
Debian_linux,
Jackson\-Databind,
Business_process_management_suite,
Primavera_p6_enterprise_project_portfolio_management,
Primavera_unifier,
Retail_workforce_management_software,
Webcenter_portal
|
9.8
|
|
|
|
2019-01-02
|
CVE-2018-19360 |
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization. |
Debian_linux,
Jackson\-Databind,
Business_process_management_suite,
Primavera_p6_enterprise_project_portfolio_management,
Primavera_unifier,
Retail_workforce_management_software,
Webcenter_portal
|
9.8
|
|
|
|
2019-01-02
|
CVE-2018-19362 |
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization. |
Debian_linux,
Jackson\-Databind,
Business_process_management_suite,
Primavera_p6_enterprise_project_portfolio_management,
Primavera_unifier,
Retail_workforce_management_software,
Webcenter_portal
|
9.8
|
|
|
|
2019-01-02
|
CVE-2018-19361 |
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization. |
Debian_linux,
Jackson\-Databind,
Business_process_management_suite,
Primavera_p6_enterprise_project_portfolio_management,
Primavera_unifier,
Retail_workforce_management_software,
Webcenter_portal
|
9.8
|
|
|
|
2019-01-02
|
CVE-2018-19360 |
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization. |
Debian_linux,
Jackson\-Databind,
Business_process_management_suite,
Primavera_p6_enterprise_project_portfolio_management,
Primavera_unifier,
Retail_workforce_management_software,
Webcenter_portal
|
9.8
|
|
|
|
2019-01-16
|
CVE-2019-2512 |
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7-17.12 and 18.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker... |
Primavera_p6_enterprise_project_portfolio_management
|
4.7
|
|
|
2018-10-16
|
CVE-2018-3281 |
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker... |
Primavera_p6_enterprise_project_portfolio_management
|
6.1
|
|