The vulnerability of the IBM Security Guardium information protection mechanism lies in its lack of protection for SQL query structures. This allows attackers to view, add, modify, or delete data.

The vulnerability of the IBM Security Guardium security tool relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to remotely access, view, add, modify, or delete data using specially crafted SQL statements...

Oracle Communications Policy Management Unauthorized Operation Vulnerability

Oracle Communications Applications is a suite of Oracle applications for rapidly delivering and monetizing digital life communications.Oracle Communications Policy Management is one of the communications policy management components. A security vulnerability exists in the Portal, CMP subcomponent...

CVE-2017-1311

IBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 125719...

CVE-2017-3630

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2017-2989

Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database...

PT-2017-15630

Name of the Vulnerable Software and Affected Versions Adobe Campaign versions Build 8770 and earlier Description The issue is related to an input validation bypass that could allow unauthorized access to read, write, or delete data from the Campaign database. Recommendations For Adobe Campaign...

CVE-2016-8299

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Oracle Solaris Component

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Bash subcomponent of the Oracle Solaris component version 10 of the Oracle Sun Systems Products Suite. An...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures and delete data

The vulnerability of Google Play’s Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating locally, to bypass security measures and delete data...

PT-2016-2540

Name of the Vulnerable Software and Affected Versions Google Play services versions prior to 2016-08-05 Description The issue is related to insufficient access control in Google Play services on Android, allowing a local user to bypass the Factory Reset Protection mechanism and delete data...

Oracle Communications Applications Unspecified Vulnerability in Oracle Communications EAGLE Application Processor Component

Oracle Communications is a suite of communications applications for rapidly delivering and monetizing digital lifestyle services from Oracle Corporation. the Oracle Communications EAGLE Application Processor is one of the platform components that provides Signaling Transmission Points STPs,...

The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in the Microsoft .NET Framework. This vulnerability is related to incorrect handling of localized resource identifiers. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then...

Unspecified Vulnerability in Oracle Financial Services Software Oracle FLEXCUBE Direct Banking Component (CNVD-2016-02479)

Oracle Financial Services Software is a set of Oracle's core banking, online banking and property management financial services software, of which Oracle FLEXCUBE Direct Banking is a set of Internet and mobile banking solution components. An unspecified vulnerability exists in the Pre-Login...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2016-02558)

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability in the PIA Search Functionality...

Unspecified Vulnerability in Oracle Fusion Middleware WebLogic Server Component (CNVD-2016-02580)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebLogic Server is an application server component for both cloud and traditional environments. An unspecified vulnerability in the Core...

PT-2016-2226

Name of the Vulnerable Software and Affected Versions Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-04-01 Description The issue is related to the Setup Wizard component in the Android operating system, which has inadequate access control. This allows a local attacker to...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures and delete data

The vulnerability of the Android operating system is related to security configuration errors. Exploiting this vulnerability allows a local attacker to bypass security measures and delete data...

PT-2016-1576

Name of the Vulnerable Software and Affected Versions Android versions 5.1.x before LMY49H Android versions 6.x before 2016-03-01 Description The issue is related to errors in security settings, allowing a local attacker to bypass protection mechanisms and delete data. The estimated number of...

CVE-2016-0812

The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the...

The vulnerability of the Solaris operating system, which allows a hacker to modify data

The vulnerability of the NDMP Backup Service component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability could allow an attacker, operating locally, to gain access to modify, add, or delete data...