129 matches found
Design/Logic Flaw
An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level...
CVE-2019-20818
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level...
CVE-2019-20818
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level...
CVE-2019-20814
An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level...
CVE-2019-20814
CVE-2019-20814 affects Foxit PhantomPDF before 8.3.12. The issue is a memory-allocation problem where data is created for each page at the application level, leading to memory consumption that can impact stability. The Red Hat/CNVD/CVE records corroborate the same root cause. No exploitation deta...
Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Balance Sheet Planning
Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Balance Sheet Planning, whi...
CVE-2020-2891
Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications component: User Interfaces. The supported version that is affected is 8.0.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2019-2684
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2019-37219)
Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...
Unspecified Vulnerability in Oracle GraalVM Enterprise Edition (CNVD-2019-38824)
Oracle GraalVM is the United States Oracle Oracle company's set of instant compiler written in the Java language. The product supports a variety of programming languages and execution modes.GraalVM Enterprise Edition is the enterprise version of GraalVM. An unspecified vulnerability exists in...
Oracle Database Server Java VM Component Input Validation Error Vulnerability
Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Java VM is one of the Java virtual machine components. An input validation error vulnerability exists in t...
Unspecified Vulnerability in Oracle FLEXCUBE Direct Banking (CNVD-2019-37406)
Oracle FLEXCUBE Direct Banking enables banks to deliver a tailored, portal-based, rich online customer experience based on demographics and market segments. A security vulnerability exists in Oracle FLEXCUBE Direct Banking 12.0.2, 12.0.3. An attacker could exploit the vulnerability to access data...
CVE-2019-2633
Vulnerability in the Oracle Work in Process component of Oracle E-Business Suite subcomponent: Messages. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows low privileged attacker with network...
Design/Logic Flaw
Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successfu...
CVE-2007-2617
creationtimestamp| type| source ---|---|--- 2018-09-21 01:57:20+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/solaris/escalate/srsexecreadline.rb 2025-02-06 03:13:38+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:22+00:00| seen|...
CVE-2017-17932
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/allmediaserverbof.rb 2022-04-03 22:26:52+00:00| seen| https://t.me/cibsecurity/40069 2022-04-04 14:43:10+00:00|...
The vulnerability of the InnoDB component of the MySQL database management system allows a hacker to gain privileges for creating, deleting, or modifying data, or to cause service interruptions.
The vulnerability of the InnoDB component of the MySQL database management system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to gain privileges necessary for creating, deleting, or modifying MySQL data, or to cause service failures...
Unspecified Vulnerability in Oracle Financial Services Price Creation and Discovery Component
Oracle Financial Services Applications is Oracle's suite of core banking, online banking, and property management financial services software. Oracle Financial Services Price Creation and Discovery is one of the financial services price creation and discovery component. A security vulnerability...
CVE-2018-2655
Vulnerability in the Oracle Work in Process component of Oracle E-Business Suite subcomponent: Assemble/Configure to Order. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker...
CVE-2017-10360
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...