Oracle MySQL Connector/Net Subcomponent Denial of Service Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Connectors is one of the drivers to connect applications that use MySQL. A security vulnerability exists i...

The vulnerability of the HTTP/2 module of the Apache Traffic Server allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to improper handling of HTTP/2 requests. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the HTTP/2 module of the Apache Traffic Server allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to improper handling of HTTP/2 requests. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

PT-2017-3586 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6 Description: A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can...

PT-2017-3335

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to errors in resource management in the Media Framework component of the Android operating system, specifically in the ih264d get implicit weights function. This could...

PT-2017-3334

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 8.0 Description The issue is related to errors in resource management in the Media Framework component of the Android operating system, specifically in the ih264d parse bmb non direct cavlc function. This could all...

The vulnerability in the IMS multimedia message transmission subsystem of the RCS standard in the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the IMS multimedia message transmission subsystem of the RCS standard in the Android operating system’s CAF builds is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of the Android CAF-release operating system, related to access control deficiencies, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by sending UE identifier IMEI or IMEISV to the...

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Android operating system from the CAF repository exists due to deficiencies in access control to the file system. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system Android from the CAF repository is related to deficiencies in access control to the file system. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Android CAF-release operating system’s supervisor allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system’s supervisor is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Inter-RAT process in the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Inter-RAT process in the Android CAF-release operating system is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

Oracle Java SE Remote Vulnerability (CNVD-2017-21148)

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A security vulnerability exists in the ImageIO subcomponent of t...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2017-28402)

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2017-28399)

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

Buffer overflow

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications subcomponent: OPS Operations. The supported version that is affected is 5.5. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality RE...

Oracle Hospitality Reporting and Analytics Denial of Service Vulnerability

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

Oracle Retail Xstore Point of Service Remote Vulnerability

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation. Oracle Retail Xstore Point of Service is one of the retail point of service management components. A security vulnerability exists in the Point of Sale subcomponent of the Retail Xstore Point of...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-17185)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Connector/C subcomponent of the MySQL Server component in Oracle MySQL. A remotely authorized attacker...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-17184)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server component is the server component. A security vulnerability exists in the Server: DML subcomponent of the MySQL Server component of Oracle MySQL. A remotely authorized attacker coul...