Oracle WebLogic Server Remote Vulnerability (CNVD-2017-26394)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

Oracle WebLogic Server Remote Vulnerability (CNVD-2017-26393)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

CVE-2017-11135

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The logout mechanism does not check for authorization. Therefore, an attacker only needs to know the device ID. This causes a denial of service. This might be...

Oracle iStore Remote Vulnerability (CNVD-2017-26818)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Oracle iStore is one of the ability to allow merchant...

Oracle Enterprise Repository Unauthorized Operation Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments, the platform provides middleware, software collection and other functions. enterprise Repository is one of the data storage...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2017-15376)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Oracle One-to-One Fulfillment is one of the...

Oracle Marketing Unauthorized Operation Vulnerability (CNVD-2017-06403)

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software, of which Oracle Marketing is a component for managing marketing-related information and processes. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Oracle WebCenter Sites Unauthorized Operation Vulnerability

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

CVE-2017-3545

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Blob Server. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP ...

Nextcloud: Delete All Data of Any User

If you are user have permission manage useradmin group, you can delete all data off website. step: 1. Create new user with username is '.'. 2. Delete user, who just have been created. Cause: when you create new use, nextcloud app will make a new folder same name with username, which have been...

The vulnerability of the Android operating system, which allows a hacker to delete user data

The vulnerability of the Wi-Fi component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete user data remotely...

Google Android Wi-Fi elevation of privilege vulnerability (CNVD-2017-03827)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with Wi-Fi as one of the wireless connectivity components. An elevation of privilege vulnerability exists in Google Android Wi-Fi. An attacker can exploit this vulnerability to...

CVE-2017-0490

An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android...

Hadoop, CouchDB Next Targets in Wave of Database Attacks

Insecure Hadoop and CouchDB installations are the latest targets of cybercriminals who are hijacking and deleting data. Last week, security researchers said 28,000 MongoDB and Elasticsearch installations were hacked in a new wave of attacks against unprotected open source data management platform...

IBM Kenexa LMS on Cloud SQL Injection Vulnerability (CNVD-2017-00565)

IBM Kenexa LMS on Cloud is a configurable, enterprise-grade social learning management system LMS from IBM that integrates social networking, collaboration, and knowledge sharing capabilities. The system provides interactive features and supports users to evaluate learning content and share their...

CVE-2016-6844

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Outside In Technology Component (CNVD-2016-10062)

Oracle Outside In Technology is the United States Oracle Oracle company's set of software development kit SDK, which provides developers with a set of access, conversion and control of a variety of unstructured format files, a comprehensive solution. A remote security vulnerability exists in the...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris Component

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Kernel Zones subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11.3. An...

Unspecified Vulnerability in Oracle E-Business Suite Customer Interaction History Component

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Corporation, of which Oracle Customer Interaction History is one of the customer interaction history management components. A remote security vulnerability exists in the...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Enterprise Manager Base Platform Component

Oracle Enterprise Manager Grid Control is a suite of systems management software from Oracle USA. The software provides centralized monitoring, lifecycle management, and other functions for the Oracle IT architecture.Oracle Enterprise Manager Base Platform is one of the system management platform...