Aggregator

CVE-2016-1000031 | Oracle Insurance Policy Administration J2EE 10.0/10.1/10.2/11.0 Apache Commons FileUpload access control (Nessus ID 118732 / ID 316356)

Vuldb Updates
8 months 4 weeks ago
A vulnerability, which was classified as very critical, has been found in Oracle Insurance Policy Administration J2EE 10.0/10.1/10.2/11.0. This issue affects some unknown processing of the component Apache Commons FileUpload. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2016-1000031. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Exploited: Cisco, SharePoint, Chrome vulnerabilities

Help Net Security
8 months 4 weeks ago

Threat actors have been leveraging zero and n-day vulnerabilities in Cisco security appliances (CVE-2024-20481), Microsoft Sharepoint (CVE-2024-38094), and Google’s Chrome browser (CVE-2024-4947). CVE-2024-20481 (Cisco ASA/FTD) In the past few days, Cisco has released fixes for a slew of vulnerabilities affecting the software powering its security appliances. Among them several are of particular note: CVE-2024-20481, a vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense … More →

The post Exploited: Cisco, SharePoint, Chrome vulnerabilities appeared first on Help Net Security.

Zeljka Zorz

Linux 项目根据 OFAC 制裁名单移除俄罗斯维护者

Solidot
8 months 4 weeks ago
Linux 项目以合规为由移除了多名俄罗斯维护者，但没有对合规的理由进行澄清。其中一位受影响维护者 Serge Semin 在内核邮件列表上发表了一份长长的告别邮件，资深内核开发者 James Bottomley 随后澄清 Linux 项目是根据美国财政部海外资产控制办公室（OFAC）的特别指定国民清单（SDN）制裁名单移除俄罗斯维护者。如果俄罗斯维护者所在的公司列入 OFAC 的 SDN 清单，受 OFAC 制裁计划的约束，或者由清单上的公司拥有/控制，那么 Linux 项目与维护者合作的能力将受到限制。Bottomley 说，律师们还在讨论细节，会在未来制作一份更长的政策文件。资深 EXT4 维护者 Ted Ts'o（曹子德）还因此讨论了是否应该将华为开发者移除出维护者名单，华为也被美国列入了制裁名单。

CVE-2016-1000031 | Oracle Insurance Calculation Engine 9.7/10.0/10.1/10.2 Apache Commons FileUpload access control (Nessus ID 118732 / ID 316356)

Vuldb Updates
8 months 4 weeks ago
A vulnerability classified as very critical was found in Oracle Insurance Calculation Engine 9.7/10.0/10.1/10.2. This vulnerability affects unknown code of the component Apache Commons FileUpload. The manipulation leads to improper access controls. This vulnerability was named CVE-2016-1000031. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad