PT-2017-16002

Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.4.0.x through 5.5.1.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks ca...

PT-2017-16006

Name of the Vulnerable Software and Affected Versions Oracle Hospitality OPERA 5 Property Services versions 5.4.0.x through 5.5.1.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks...

CVE-2017-3552: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Room Image/Picture Setup. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability allows...

CVE-2017-3574: Undefined Security Weakness

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA License code configuration. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability allow...

CVE-2016-4075

Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL...

CVE-2016-4075

Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL...

CVE-2016-4075

CVE-2016-4075 affects Opera Mini 13 and Opera Stable 36, allowing remote attackers to spoof the displayed URL via a crafted HTML document related to about:blank. Connected sources confirm this address-bar spoofing vulnerability in Opera products and note remote exploitation through specially craf...

PT-2017-8455

Name of the Vulnerable Software and Affected Versions Opera Mini version 13 Opera Stable version 36 Description The issue allows remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL. Recommendations For Opera Mini version 13, update to a version...

Upcoming update with IDN homograph phishing fix

Security Upcoming update with IDN homograph phishing fix Share April 21st, 2017 Domains are an integral part of the internet. Similar to how people write different languages using different characters or scripts, domain names can be composed of various scripts in whole or in part, and are called...

CVE-2016-4075: URL Redirection to Untrusted Site

Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related to the about:blank URL...

Oracle Hospitality OPERA 5 Property Services Local Vulnerability

Oracle OPERA Property is a Cisco asset management system. A local security vulnerability exists in the Oracle Hospitality OPERA 5 Property Services component that could be exploited by an attacker to compromise system confidentiality, integrity, and availability...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-05849)

Oracle OPERA Property is a Cisco asset management system. A remote security vulnerability exists in the Oracle Hospitality OPERA 5 Property Services component, which can be exploited by remote attackers to compromise system confidentiality...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-05848)

Oracle OPERA Property is a Cisco asset management system. A remote security vulnerability exists in the Oracle Hospitality OPERA 5 Property Services component, which can be exploited by remote attackers to compromise system confidentiality...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability

Oracle OPERA Property is a Cisco asset management system. A remote security vulnerability exists in Oracle Hospitality OPERA 5 Property Services, which can be exploited by a remote attacker to compromise the confidentiality, integrity of the system...

PT-2017-3241

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.81 for Mac, Windows, and Linux Google Chrome version prior to 58.0.3029.83 for Android Opera affected versions not specified Description The issue is related to a use after free in Chrome Apps, which c...

PT-2017-16289

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.81 Opera affected versions not specified Description A race condition in navigation allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. This issue affects...

PT-2017-3236

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.81 Opera versions prior to 58.0.3029.81 Description The issue exists due to an insufficient watchdog timer in navigation, allowing a remote attacker to spoof the contents of the Omnibox URL bar via a...

PT-2017-3239

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.81 Opera versions prior to 58.0.3029.81 Description The issue is related to incorrect handling of DOM changes in Blink, which can lead to heap corruption. A remote attacker can potentially exploit this...

PT-2017-3244

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.81 Opera versions prior to 58.0.3029.81 Description A use after free in the PrintPreview function of the browser allows a remote attacker to potentially perform out of bounds memory access via a crafte...

PT-2017-3238

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 58.0.3029.81 Opera versions prior to 58.0.3029.81 Description The issue is related to a lack of appropriate action on page navigation in Blink, which could allow a remote attacker to confuse a user into making a...