CVE-2016-8312

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

Design/Logic Flaw

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

Design/Logic Flaw

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: User Interface. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technica...

CVE-2016-8307

CVE-2016-8307 affects Oracle FLEXCUBE Universal Banking (Core). The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access, potentially allowing read access to a subset of data in supported Oracle FLEXCUBE versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 ...

CVE-2017-3297

The CVE-2017-3297 entry concerns Oracle FLEXCUBE Direct Banking (subcomponent: Framework). Affected versions are 12.0.2 and 12.0.3. The vulnerability is described as difficult to exploit, allowing a low-privilege attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking, ...

CVE-2017-3369

CVE-2017-3369 affects Oracle E-Business Suite, Oracle iSupport UI subcomponent. Vulnerable versions: 12.1.1, 12.1.2, 12.1.3. An unauthenticated attacker with network access over HTTP can exploit this vulnerability, with human interaction required, to gain unauthorized access to Oracle iSupport da...

CVE-2016-8300

CVE-2016-8300 affects Oracle FLEXCUBE Private Banking (subcomponent: Product / Instrument Search) with affected versions 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise the Private Banking component, potentially enabling unauth...

CVE-2017-3359

CVE-2017-3359 affects Oracle E-Business Suite’s Oracle Customer Intelligence (User Interface), specifically versions 12.1.1–12.1.3. The vulnerability allows network-access, unauthenticated or semi-authenticated access via HTTP to compromise Oracle Customer Intelligence; attacks may leverage user ...

CVE-2017-3348

CVE-2017-3348 affects Oracle E-Business Suite Oracle Marketing (User Interface subcomponent). Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. Description: an unauthenticated attacker with network access via HTTP can compromise Oracle Marketing; successful attacks requir...

CVE-2017-3293

CVE-2017-3293 is a Use-After-Free vulnerability in the Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected versions include 8.5.2 and 8.5.3. The issue arises in the RTF/Outside In Filters parsing path where freed memory can be reused (notably during handli...

CVE-2017-3359

Vulnerability in the Oracle Customer Intelligence component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2016-8299

CVE-2016-8299 affects Oracle FLEXCUBE Universal Banking (Core) across multiple supported versions (11.3.0, 11.4.0, 12.0.1–12.2.0). The vulnerability lies in the Core subcomponent and is exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauthorized updat...

CVE-2017-3296

CVE-2017-3296 affects Oracle Commerce Platform (Dynamo Application Framework) with affected versions 10.0.3.5, 10.2.0.5, and 11.2.0.2. The vulnerability allows an unauthenticated attacker, with network access via HTTP, to compromise the platform and read a subset of data; exploitation requires hu...

CVE-2017-3286

CVE-2017-3286 describes a vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: Patching). Affected supported versions are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. The description states that an easily exploitable vulnerability could allow a high-privi...

CVE-2017-3370

CVE-2017-3370 affects Oracle E-Business Suite's iSupport User Interface (versions 12.1.1–12.1.3). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise iSupport, with human interaction required for exploitation and potential unauthorized access/update/del...

CVE-2017-3318

CVE-2017-3318 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Affected versions are 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. The issue is described as difficult to exploit, requiring a high-privilege attacker with logon to the infr...

CVE-2016-9932

CVE-2016-9932 affects the Xen hypervisor (CMPXCHG8B emulation) from Xen 3.3.x through 4.7.x on x86. It allows local HVM guest OS users to disclose sensitive host stack memory via a supposedly-ignored operand size prefix. Connected advisories note this as XSA-200 and document patched versions in X...

Half of Ransomware Victims Pay Criminals' Demands to Recover Data

A report on ransomware sheds new light on attacks in 2016, starting with the fact that 48 percent of businesses hit by ransomware said they paid the ransom. That’s in spite of pleas from cyber security experts and the FBI not to do so. Other insights include the average ransom payment was $2,500...

wirefirst.com XSS vulnerability

Vulnerable URL: http://www.wirefirst.com/newsdetail.php?ID=3845'"--!confirmOPENBUGBOUNTY...

Information disclosure

An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID:...