Buffer overflow

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Export Functionality. Supported versions that are affected are 5.4.0.x, 5.4.1.x and 5.4.3.x. Difficult to exploit vulnerability allows high privileged attacker with...

CVE-2017-10182

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Export Functionality. Supported versions that are affected are 5.4.0.x, 5.4.1.x and 5.4.3.x. Difficult to exploit vulnerability allows high privileged attacker with...

CVE-2017-10182

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Export Functionality. Supported versions that are affected are 5.4.0.x, 5.4.1.x and 5.4.3.x. Difficult to exploit vulnerability allows high privileged attacker with...

CVE-2017-10182

The CVE-2017-10182 issue affects Oracle Hospitality OPERA 5 Property Services, specifically the OPERA Export Functionality subcomponent. Affected versions are 5.4.0.x, 5.4.1.x and 5.4.3.x. The vulnerability could be exploited by a high-privilege attacker with network access via HTTP to gain unaut...

PT-2017-11174

Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.4.0.x through 5.4.3.x Description The issue allows a high-privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services, resulting in...

CVE-2017-10182: Undefined Security Weakness

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Export Functionality. Supported versions that are affected are 5.4.0.x, 5.4.1.x and 5.4.3.x. Difficult to exploit vulnerability allows high privileged attacker with...

Mail.ru: Gain access to random information via group chat "about" property

Vulnerability based on unfiltered size of data in "about" field. In case when data length stored in "about" field is more than 2^16 for example payload is 65537"A" server will return payload with additional suffix with random information. The size of suffix is increase with size of payload...

PT-2017-16310

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera affected versions not specified Description The issue is related to the inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments, allowing a remote...

PT-2017-16303

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description The issue allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This is due to the use of...

PT-2017-16309

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera affected versions not specified Description The issue is related to the inappropriate implementation of unload handler handling in permission prompts, allowing a remote attacker to display UI ...

PT-2017-16298

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description A use after free in V8 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. This issue affects Google Chrome an...

PT-2017-16300

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description A use after free issue in Apps allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. This issue affects Google...

PT-2017-16308

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description The issue allows a remote attacker to potentially maliciously modify objects via a crafted PDF file, exploiting type confusion in PDFium. This affect...

PT-2017-16307

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera affected versions not specified Description A timing attack in SVG rendering allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page...

PT-2017-16306

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera affected versions not specified Description The issue allows a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name. This is due to insufficient policy...

PT-2017-16305

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in the Omnibox feature, allowing a remote attacker to perform domain spoofing via IDN...

PT-2017-16295

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description A stack overflow in PDFium allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file. This issue affects Google Chrome...

PT-2017-16293

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description The issue is related to an inappropriate implementation in modal dialog handling in Blink, which allowed a remote attacker to prevent a full screen...

PT-2017-16302

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description The issue allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This is due to the use of...

PT-2017-16294

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera affected versions not specified Description The issue is related to type confusion in extensions JavaScript bindings, which allowed a remote attacker to potentially maliciously modify objects...