Design/Logic Flaw

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: User Interface. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technica...

CVE-2017-3418

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: User Interface. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technica...

CVE-2017-3419

Oracle E-Business Suite CVE-2017-3419 affects the Oracle CRM Technical Foundation component (User Interface) with the 12.1.3 release. The vulnerability allows an unauthenticated attacker, over HTTP, to access and potentially modify Oracle CRM data after social interaction, as described by the CVS...

CVE-2017-3420

The CVE-2017-3420 entry concerns Oracle E-Business Suite, Oracle CRM Technical Foundation (User Interface subcomponent). Affected software/version: Oracle E-Business Suite 12.1.3. The vulnerability is exploitable over HTTP with network access and unauthenticated attacker, but successful exploitat...

CVE-2017-3420

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: User Interface. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technica...

CVE-2017-3418

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: User Interface. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technica...

CVE-2017-3418

CVE-2017-3418 affects Oracle E-Business Suite, specifically the Oracle CRM Technical Foundation component (User Interface) version 12.1.3. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise the CRM Technical Foundation; attacks may impact additional p...

CVE-2017-3419

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: User Interface. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technica...

AG Nominee Backs Law Enforcement's Ability to 'Overcome' Encryption

President Donald Trump’s attorney general pick Jeff Sessions has amplified the encryption debate with comments he made during Senate Judiciary Committee confirmation hearings last week stating law enforcement should be able to “overcome” digital locks in criminal investigations. Sessions’ positio...

Oracle E-Business Suite Remote Vulnerability (CNVD-2017-00965)

Oracle E-Business Suite E-Business Suite is Oracle's Oracle set of fully integrated global business management software. Oracle CRM Technical Foundation is one of the CRM application development and deployment of basic components. A remote vulnerability exists in the Oracle CRM Technical Foundati...

Oracle E-Business Multiple Vulnerabilities (January 2017 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2017 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple unspecified vulnerabilities in multiple components and subcomponents, the most severe of which can allow an unauthenticated, remote...

Apache NiFi 1.0.0 / 1.1.0 Cross Site Scripting Vulnerability

Exploit for multiple platform in category web applications CVE-2016-8748: Apache NiFi XSS vulnerability in connection details dialogue Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache NiFi 1.0.0 Apache NiFi 1.1.0 Description: There is a cross-site scripting...

[SECURITY] Fedora 24 Update: ca-certificates-2017.2.11-1.0.fc24

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

[SECURITY] Fedora 25 Update: ca-certificates-2017.2.11-1.0.fc25

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Media Foundation component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Update Rollup 9 for System Center 2012 R2 Orchestrator - Service Provider Foundation

Update Rollup 9 for System Center 2012 R2 Orchestrator - Service Provider Foundation Introduction This article describes the issues that are fixed and the features that are added in Update Rollup 9 for Microsoft System Center 2012 R2 Orchestrator - Service Provider Foundation. Additionally, this...

TFS application pool and Certreq.exe crash after security update 3081320 is installed in Windows Server 2012 R2

TFS application pool and Certreq.exe crash after security update 3081320 is installed in Windows Server 2012 R2 This article describes an issue that occurs after you install security update 3081320 in Windows Server 2012 R2. You can fix this issue by using the update in this article. Before you...

Update Rollup 6 for System Center 2012 R2 Orchestrator - Service Provider Foundation

Update Rollup 6 for System Center 2012 R2 Orchestrator - Service Provider Foundation Introduction This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center 2012 R2 Orchestrator - Service Provider Foundation. This article also contains the installation...

MS14-022: Description of the security update for SharePoint Foundation 2013: May 13, 2014

MS14-022: Description of the security update for SharePoint Foundation 2013: May 13, 2014 Introduction This update resolves vulnerabilities in Microsoft SharePoint Foundation 2013 that could allow remote code execution if an authenticated attacker sends specially crafted page content to a target...

MS13-067: Description of the security update for SharePoint Foundation 2010: September 10, 2013

MS13-067: Description of the security update for SharePoint Foundation 2010: September 10, 2013 Introduction This security update resolves vulnerabilities in Microsoft Office Server software which could allow remote code execution in the context of the W3WP service account. Summary Microsoft has...