Oracle Trade Management Component Access Control Error Vulnerability (CNVD-2019-31017)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...

Oracle Marketing Component Access Control Error Vulnerability (CNVD-2019-29190)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the...

Oracle Retail Applications Retail Customer Engagement Access Control Error Vulnerability

Oracle Retail Applications is a suite of retail applications store solutions from Oracle Corporation. The product includes inventory management, sales management and customer management, etc. Retail Customer Engagement is one of the retailer customer engagement components, mainly used to interact...

Oracle E-Business Suite iStore Component Access Control Error Vulnerability

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iStore is one of the business can effectively build,...

Oracle Marketing Component Access Control Error Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the...

Oracle Trade Management Component Access Control Error Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...

Oracle E-Business Suite Territory Management Component Access Control Error Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Territory Management is one of th...

Oracle E-Business Suite Email Center Component Access Control Error Vulnerability (CNVD-2019-38834)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Email Center is one of the e-mail component. An acces...

Oracle E-Business Suite Email Center Component Access Control Error Vulnerability

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Email Center is one of the e-mail component. An acces...

Oracle BI Publisher Access Control Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...

Joomla JVLE JV-LinkExchanger SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in Joomla JVLE JV-LinkExchanger. Due to the program filtering user-supplied data sufficiently before using it in SQL queries. Allows an attacker to corrupt the application, access or modify data, or explo...

Joomla FacileForms SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in Joomla FacileForms. Due to the program adequately filtering user-supplied data before using it in SQL queries. Allows an attacker to compromise the application, access or modify data, or exploit...

Joomla WebMapPlus SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in Joomla WebMapPlus. Due to the program failing to adequately filter user-supplied data before using it in SQL queries. Allowing an attacker to compromise the application, access or modify data, or explo...

Google Kubernetes CNI Portmap Plugin Remote Vulnerability

Google Kubernetes is an open source Docker container cluster management system from Google. The system provides resource scheduling , deployment and operation , service discovery and expansion and contraction for containerized applications.CNI Portmap Plugin is one of the plugins. A security...

TIBCO Data Science Unauthorized Modification Vulnerability

TIBCO Spotfire Data Science is a data analytics platform. A security vulnerability exists in TIBCO Spotfire Data Science, which can be exploited by a remote attacker to submit a special request that can delete or modify data with elevated privileges...

Cisco IOS and IOS XE Proxy Certificate Validation Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A certificate validation vulnerability exists in the Cisco Network Plug-and-Play PnP agent in Cisco IOS and IOS XE, which stems from the program's failure to adequately validate certificates, and can b...

CVE-2019-1010257

An Information Disclosure / Data Modification issue exists in article2pdfgetfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. A URL can be constructed which allows overriding the PDF file's path leading to any PDF whose path is known and which is readable to the web server can ...

CVE-2019-1010257

An Information Disclosure / Data Modification issue exists in article2pdfgetfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. A URL can be constructed which allows overriding the PDF file's path leading to any PDF whose path is known and which is readable to the web server can ...

Design/Logic Flaw

An Information Disclosure / Data Modification issue exists in article2pdfgetfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. A URL can be constructed which allows overriding the PDF file's path leading to any PDF whose path is known and which is readable to the web server can ...

CVE-2019-1010257

The CVE-2019-1010257 entry concerns the WordPress article2pdf plugin (versions 0.24–0.27) and a path traversal/override flaw in article2pdf_getfile.php. A crafted URL can override the target PDF file path, enabling download of any PDF that is readable by the web server, with the file potentially ...