Oracle Fusion Middleware Oracle GlassFish Server Component Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection, etc. Oracle GlassFish Server is one of the components that can realize t...

Oracle HTTP Server A vulnerability exists in the HTTP Server component.

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides features such as middleware, Oracle HTTP Server, a component based on Apache HTTP Server and used to create web servers. The platform provides...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control (CNVD-2015-06826)

Oracle Enterprise Manager Grid Control is a suite of systems management software from Oracle Corporation. The software provides centralized monitoring, lifecycle management and other functions for Oracle IT architecture. enterprise Manager Ops Center is one of the enterprise data center monitorin...

Firefox ESR Heap Buffer Overflow

The vulnerability of the YCbCrImageDataDeserializer::ToDataSourceSurface function in Firefox ESR browsers is related to code errors. Exploiting this vulnerability may allow an attacker to read data from uninitialized memory areas remotely...

omron-info NSE Script

This NSE script is used to send a FINS packet to a remote device. The script will send a Controller Data Read Command and once a response is received, it validates that it was a proper response to the command that was sent, and then will parse out the data. Example Usage nmap --script omron-info...

Vulnerability in Oracle Health Sciences Applications Health Sciences Argus Safety Component

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle. A security vulnerability exists in the BIP Installer subcomponent of the Oracle Health Sciences Argus Safety component of Oracle Health Sciences Applications version 8.0. A...

Unspecified Vulnerability in Oracle PeopleSoft Product PeopleSoft Enterprise PeopleTools Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions.PeopleSoft Enterprise PeopleTools is a tool and technology platform component that transforms the way organizations manage, use, and maintain PeopleSoft software. An unspecified security vulnerability exists in the PIA...

Content Provider in CamiApp for Android fails to restrict access permissions

Overview The Content Provider in CamiApp for Android provided by KOKUYO S Co.,Ltd. contains an issue where access permissions are not restricted. Hiroshi Kumagai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impa...

PT-2014-3887

Name of the Vulnerable Software and Affected Versions IBM Rational Requirements Composer versions 3.x through 3.0.1.5 and versions 4.x through 4.0.5 IBM Rational Requirements Composer version 3.0.1.6 before iFix2 IBM Rational DOORS Next Generation versions 4.x through 4.0.5 Description The issue...

CVE-2014-0844: Undefined Security Weakness

Unspecified vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote authenticated users to read arbitrary data via unknown vectors...

Firebird Relational Database CNCT Group Number Buffer Overflow

This module exploits a vulnerability in Firebird SQL Server. A specially crafted packet can be sent which will overwrite a pointer allowing the attacker to control where data is read from. Shortly, following the controlled read, the pointer is called resulting in code execution. The vulnerability...

PT-2012-3922

Name of the Vulnerable Software and Affected Versions Iomega Home Media Network Hard Drive with EMC Lifeline firmware versions prior to 2.104 Iomega Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmware versions prior to 3.2.3.15290 Iomega iConnect with EMC Lifeline firmware...

PT-2012-2063

Name of the Vulnerable Software and Affected Versions Movable Type versions 4.x through 4.35 Movable Type versions 5.x through 5.04 Description The issue allows remote attackers to read or modify data via unknown vectors. Recommendations For Movable Type versions 4.x through 4.35, update to versi...

CVE-2011-5085: Undefined Security Weakness

Unspecified vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to read or modify data via unknown vectors...

PT-2011-4564

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 8.0 Thunderbird versions prior to 8.0 Description The issue arises from improper interaction with the GPU memory behavior of a certain driver for Intel integrated GPUs, allowing remote attackers to bypass the...

USN-1232-1: X.Org X server vulnerabilities

It was discovered that the X server incorrectly handled certain malformed input. An authorized attacker could exploit this to cause the X server to crash, leading to a denial or service, or possibly execute arbitrary code with root privileges. This issue only affected Ubuntu 10.04 LTS and 10.10...

USN-1162-1: Linux kernel vulnerabilities (Marvell Dove)

Brad Spengler discovered that the kernel did not correctly account for userspace memory allocations during exec calls. A local attacker could exploit this to consume all system memory, leading to a denial of service. CVE-2010-4243 Alexander Duyck discovered that the Intel Gigabit Ethernet driver...

OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0084...

CVE-2010-1970

Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data, and consequently gain privileges, via unknown vectors...

OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0084...