Unspecified Vulnerability in Oracle Fusion Middleware Oracle Identity Manager Component (CNVD-2017-35618)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other functionality.Oracle Identity Manager is one of the enterprise identity management system...

The vulnerability in the web interface of the Cisco IOS XE operating system allows attackers to enhance their privileges and affect the confidentiality, integrity, and accessibility of data.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to deficiencies in access control for new users—specifically, the access settings that are configured for users through the web interface. Exploiting this vulnerability allows a malicious actor to enhance their...

The vulnerability of the FaxFinder fax server, related to errors in managing registration data, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of these data.

The vulnerability of the FaxFinder fax server stems from errors in the management of registration data, which are embedded in the original HTML code /systemconfiguration/ldap in an open manner. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, an...

The vulnerability of the PostscriptDelegateMessage function (coders/ps.c) in the console-based image editing tool ImageMagick allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PostscriptDelegateMessage function coders/ps.c in the console-based image editing tool ImageMagick is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the `sixel_output_create` function (coders/sixel.c) in the console-based graphic editor ImageMagick allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sixeloutputcreate function in the console-based image editing tool ImageMagick is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Vulnerability in the UI framework of the Android operating system, which allows attackers to enhance their privileges and affect the confidentiality, integrity, and accessibility of data.

The vulnerability in the Android operating system’s UI framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the TIFFIgnoreTags component (coders/tiff.c) in the console-based graphic editor ImageMagick allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the TIFFIgnoreTags component coders/tiff.c in the console-based graphic editor ImageMagick is related to pointer aliasing errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PT PeopleTools Component (CNVD-2017-31835)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PT PeopleTools is one of the tools and technology platform components...

Oracle Retail Applications Unspecified Vulnerability in Oracle Retail Point-of-Service Component

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. Oracle Retail Point-of-Service is one of the retail point-of-service management components. An unspecified vulnerability exists in the Security subcomponent of the Oracle Retail...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2017-31839)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2017-31838)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox Component (CNVD-2017-31307)

Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. An unspecified vulnerability exists in the Core subcomponent of the Oracle VM VirtualBox component of Orac...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Component (CNVD-2017-31849)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the Human Capital Management HCM components. An unspecified...

CVE-2017-10397

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications subcomponent: BaseMasterPage. The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Code injection

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Enterprise Portal. The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10372

Summary of CVE-2017-10372 (Oracle Hospitality Guest Access) : A vulnerability in the Oracle Hospitality Guest Access component (Base) of Oracle Hospitality Applications affects versions 4.2.0 and 4.2.1. The issue enables a high-privilege attacker who has network access via HTTP to compromise Gues...

CVE-2017-10055

Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware subcomponent: Admin Graphical User Interface. The supported version that is affected is 7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2017-10295

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker...

Unspecified Vulnerability in Oracle Applications DBA

Oracle E-Business Suite E-Business Suite is Oracle's Oracle set of fully integrated global business management software. Oracle Applications DBA is one of the application database management component. An unspecified vulnerability exists in the AD Utilities subcomponent of the Oracle Applications...

Unspecified Vulnerability in Oracle E-Business Suite Trade Management Component

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Oracle Trade Management is one of the company's...