Oracle Hyperion BI+ Access Control Error Vulnerability

Oracle Hyperion is a suite of financial modeling applications from Oracle that provides financial close, reporting, etc. Hyperion BI+ is one of the Business Intelligence platform components that provides management reporting and analysis on any data source. An access control error vulnerability...

Unspecified Vulnerability in Oracle Argus Safety (CNVD-2019-37398)

Oracle Health Sciences Applications is a suite of Oracle's clinical development solutions for the healthcare industry, of which Argus Safety is a security component. A security vulnerability exists in the Console subcomponent of the Argus Safety component of Oracle Health Sciences Applications,...

Oracle Fusion Middleware WebCenter Portal Access Control Error Vulnerability (CNVD-2020-02562)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. WebCenter Portal is one of the components that seamlessly integrates the portal with enterprise...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-28458)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

Interactive Advertising Bureau OpenRTB Design Flaw Vulnerability

Interactive Advertising Bureau IAB OpenRTB is an open source real-time bidding system advertising industry. A security vulnerability exists in the implementation of the protocol in IAB OpenRTB version 2.3. A remote attacker could exploit the vulnerability to cancel the status of an advertisement...

The vulnerability in the RubyGems package management system arises from improper handling of parameters, allowing users to compromise data integrity.

The vulnerability of the RubyGems package management system is related to the improper handling of HTTP/FTP request parameters, which can lead to incorrect URL formation. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the multimedia library libvorbis, related to the escape from memory buffer reading, allows attackers to cause service failures or compromise data confidentiality and integrity.

The vulnerability of the multimedia library libvorbis is related to an error that causes reading beyond the allocated buffer memory space. Exploiting this vulnerability can allow a malicious actor to cause service failures or compromise data confidentiality and integrity through the use of...

JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JSSE. Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

Unspecified Vulnerability in Oracle Fusion Middleware WebCenter Sites Component

Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, and WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences to drive sales and customer...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2019-28246)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris (CNVD-2019-30941)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the LibKMIP subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11....

Unspecified Vulnerability in Oracle Outside In Technology Component (CNVD-2019-28221)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Cruise Fleet Management Component (CNVD-2019-37394)

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, provides tracking and management of customer services throughout the journey to improve...

bouncycastle: BKS-V1 keystore files vulnerable to trivial hash collisions

A flaw involving a risky cryptographic algorithm was found in Bouncycastle. BKS-V1 contained a design flaw resulting from using the SHA-1 hash function, as it contains a 16-bit MAC key size and a 160-bit SHA-1 hash function. This flaw allows an attacker to brute force the password due to the...

IBM Security Key Lifecycle Manager Improper Authentication Vulnerability

IBM Security Key Lifecycle Manager centralizes, simplifies and automates the encryption key management process, helping to minimize the risks and operational costs of encryption key management. An improper authentication vulnerability exists in IBM Security Key Lifecycle Manager. An authenticated...

CVE-2018-1749

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484...

AccuPOS Insecure Privilege Vulnerability

AccuPOS is a retail system from the American company AccuPOS. The system features order management, payment management and inventory management. An insecure privilege vulnerability exists in AccuPOS version 2017.8, which stems from the program assigning insecure 'Authenticated Users: Modify'...

Unspecified Vulnerability in Oracle MySQL Server Component (CNVD-2019-07353)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the MyISAM subcomponent of the MySQL Server...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Component (CNVD-2019-36186)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the API frameworks subcomponent of the Sun ZFS Storage AK prior to version 8.7.19 component of...

Unspecified Vulnerability in Oracle Retail Applications MICROS Retail-J Component (CNVD-2018-21107)

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. MICROS Retail-J is one of the advanced retail system components. A security vulnerability exists in the Interfaces subcomponent of the MICROS Retail-J component of Oracle Retail...