CVE-2017-3314

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.0, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris Component (CNVD-2016-09897)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Kernel subcomponent of the Solaris component of the Oracle Sun Systems Products Suite, versions 10 and 11.3...

Unspecified Vulnerability in Oracle E-Business Suite One-to-One Fulfillment Component

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Oracle One-to-One Fulfillment is one of the...

Unspecified Vulnerability in Oracle E-Business Common Applications Calendar Component

Oracle E-Business Suite is a suite of fully integrated, global business management software from Oracle Corporation. Oracle Common Application Calendar CAC, also known as Oracle Common Application is one of the components that can simplify the management of daily activities, appointments, and...

Oracle Fusion Middleware Technology Component Denial of Service Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. A denial of service vulnerability exists in the Outside In Filters subcomponent of the Technology component of Oracle Fusion Middleware, which can be...

The vulnerability of the Solaris operating system, which allows a hacker to modify data or cause partial service failure.

The vulnerability of the Libc library component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to modify, add, or delete data, or cause partial service interruption...

Unspecified Vulnerability in Oracle PeopleSoft SCM Order Management Security Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft SCM Order Management Security component allows remote attackers to exploit the vulnerability to make unauthorized changes to data...

Solaris NDMP Backup Service Component Data Modification Vulnerability

Solaris is a unix-based operating system. An unspecified vulnerability in the Solaris NDMP Backup Service component allows attackers to exploit the vulnerability to make unauthorized changes to data...

Unspecified Vulnerability in Oracle WebLogic WLS-Console Component

Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the Oracle WebLogic WLS-Console component allows remote attackers to exploit the vulnerability to make unauthorized changes to data...

Unspecified Vulnerability in Oracle PeopleSoft PeopleTools Fluid Core Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft PeopleTools Fluid Corek component allows remote attackers to exploit the vulnerability to make unauthorized changes to data...

Unspecified Vulnerability in Oracle PeopleSoft PeopleTools PIA Core Technology Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft PeopleTools PIA Core Technology component allows remote attackers to exploit the vulnerability to make unauthorized changes to data...

The vulnerability of the Oracle E-Business Suite system’s automation functionality allows a perpetrator to alter data.

The vulnerability of the Oracle Applications Manager component in the Oracle E-Business Suite automation system is related to errors in the code. Exploiting this vulnerability allows an attacker to perform unauthorized updates, insertions, deletions of data, as well as gain read access to the dat...

PT-2019-3245 · Oracle +9 · Mysql Server +8

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.6.44 and prior MySQL Server versions 5.7.26 and prior MySQL Server versions 8.0.16 and prior Description: The issue is related to improper access control in the MySQL Server component of Oracle MySQL, specifically in t...

The vulnerability of the Windows operating system, which allows a remote attacker to escalate their privileges

The Microsoft Windows operating system contains a vulnerability related to improper verification and application of impersonation levels. This allows attackers to bypass security checks and elevate their privileges, including gaining administrator account information. If exploited successfully,...

[CVE-REQUEST] Plone XSS and permission errors

Hello all, As a member of the Plone security response team I hereby notify you that we have been made aware of three distinct security holes in Plone and are requesting CVE identifiers. 1. Reflected XSS attack A crafted URL can display arbitrary HTML output 2. Persistent XSS attack Certain valid...