3528 matches found
CVE-2017-3414
The CVE-2017-3414 entry concerns Oracle E-Business Suite’s Oracle Advanced Outbound Telephony, specifically the User Interface subcomponent. Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The vulnerability enables unauthenticated network access via HTTP to compromise the telepho...
CVE-2017-3303
Vulnerability in the Oracle XML Gateway component of Oracle E-Business Suite subcomponent: Oracle Transport Agent. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acce...
CVE-2017-3370
Vulnerability in the Oracle iSupport component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport...
CVE-2017-3300
CVE-2017-3300 pertains to Oracle PeopleSoft Enterprise PeopleTools (Multichannel Framework) with affected versions 8.54 and 8.55. The vulnerability is a cross-site scripting (XXS) flaw that can be triggered via HTTP requests, potentially allowing an attacker to hijack session data or access/modif...
CVE-2017-3423
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...
CVE-2017-3379
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...
CVE-2017-3375
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...
CVE-2017-3280
CVE-2017-3280 affects Oracle E-Business Suite, specifically the Oracle Partner Management UI. Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Oracle Partner Management, with...
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-01023)
Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A security vulnerability exists in the Server: DML subcomponent of the MySQL Server component in Oracle MySQL. ...
MySQL Cluster 7.4.x < 7.4.13 Multiple Vulnerabilities (January 2017 CPU)
The version of MySQL Cluster running on the remote host is 7.4.x prior to 7.4.13. It is, therefore, affected by multiple vulnerabilities : - An overflow condition exists in the NDBAPI subcomponent that allows an unauthenticated, remote attacker to update, insert, or delete arbitrary data...
Oracle GlassFish Server 2.1.1.x < 2.1.1.30 / 3.0.1.x < 3.0.1.15 / 3.1.2.x < 3.1.2.16 Multiple Vulnerabilities (January 2017 CPU)
According to its self-reported version number, the Oracle GlassFish Server running on the remote host is 2.1.1.x prior to 2.1.1.30, 3.0.1.x prior to 3.0.1.15, or 3.1.2.x prior to 3.1.2.16. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Security...
Malware exploit: Caberp
Type: Remote Code Execution Author: Xylitol table width="607" border="0" tr tdform method="POST" action="?php basename$SERVER'PHPSELF' ?" label for="carberp"Domain: /label input name="urlz" type="text" id="urlz" value="http://carberpPanel.com" size="50" / input type="submit" name="button"...
Panasonic, IOActive Clash on Vulnerability Report
Panasonic Avionics has pushed back against research released Tuesday by IOActive suggesting that in-flight entertainment system firmware used by more than a dozen airlines contains vulnerabilities that allow a local attacker to manipulate data displayed to passengers, or put their personal data a...
mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML...
WordPress Symposium Plugin SQL Injection (CVE-2015-6522)
An SQL injection vulnerability exists in the WordPress Symposium Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...
Cyber Swiss Army Knife: CyberChef
Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of “cyber” operations within a web browser. These operations include creating hexdumps, simple encoding like XOR or Base64, more complex encryption like AES, DES and Blowfish, data compression and...
Social Engineering Attack Vector: QRLJacking
Social Engineering Attack Vector QRLJacking or Quick Response Code Login Jacking is a simple social engineering attack vector capable of session hijacking affecting all applications that rely on “Login with QR code” feature as a secure way to login into accounts. In a simple way, In a nutshell...
Multiple Vulnerabilities in TYPO3 Code Highlighter Extension
TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. Multiple vulnerabilities exist in TYPO3 Code Highlighter Extension. An attacker can exploit the vulnerabilities to perform unauthorized operations or damage the application, access or modify data ...
pycsw SQL Injection Vulnerability
pycsw is a system written in python that implements OGC CSW server functionality. It runs on all major platforms Windows, Linux, Mac OS X. Pycsw suffers from a SQL injection vulnerability, which can be exploited by an attacker to take control of the application, access or modify data, or exploit...
