Oracle E-Business Suite Unauthorized Access

The vulnerability of the Oracle Application Object Library component in the Oracle E-Business Suite automation system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read data...

Security SiteProtector System Access Disclosure

The vulnerability of the Security SiteProtector System security system lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating locally, to gain access to protected information by reading cached data...

php: Free called on unitialized pointer in exif.c

An uninitialized pointer use flaw was found in PHP's Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exifreaddata function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application...

PT-2015-1442

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 39.0 Firefox ESR versions 31.x prior to 31.8 and 38.x prior to 38.1 Thunderbird versions prior to 38.1 Description The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation reads...

Cisco Unified MeetingPlace SQL Injection Vulnerability (CNVD-2015-04162)

Cisco Unified MeetingPlace conferencing solutions allow organizations to host integrated voice, video, and web conferences. A SQL injection vulnerability exists in Cisco Unified MeetingPlace due to the program failing to properly validate user input within a sql query. An authenticated, remote...

IBM PureApplication System Information Disclosure Vulnerability

IBM PureApplication System is a platform system designed for transactional Web and database applications. An information disclosure vulnerability exists in IBM PureApplication System, which allows remote attackers to bypass privilege checks and read sensitive information...

Unspecified Vulnerability in Oracle Supply Chain Product Suite Transportation Management Component

Oracle Transportation Management is a transportation management system. It provides transportation planning, transportation execution, and freight payment functions for shippers and third-party logistics providers. A security vulnerability exists in the Security subcomponent of the Oracle...

Unspecified Vulnerability in Oracle Supply Chain Product Suite Transportation Management Component (CNVD-2015-02605)

Oracle Transportation Management is a transportation management system. It provides transportation planning, transportation execution, and freight payment functions for shippers and third-party logistics providers. A security vulnerability exists in the Security subcomponent of the Oracle...

Xen External X86 System Device Emulation Information Disclosure Vulnerability

Xen is an open source virtual machine. Xen has a security vulnerability that allows a malicious HVM Guest to simulate reading sensitive data from other Guests via an external X86 system setting...

postgresql: CREATE INDEX race condition possibly leading to privilege escalation

Race condition in the 1 CREATE INDEX and 2 unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allows remote authenticated users to create an unauthorized index or read portions of unauthorized tables b...

PT-2013-3573

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.11 Description The issue allows local users to obtain sensitive information from kernel memory via a read operation on a malfunctioning CD-ROM drive. This is due to a problem in the mmc ioctl cdrom read data...

CVE-2011-4704: Undefined Security Weakness

The Voxofon com.voxofon application before 2.5.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS information via a crafted application...

PT-2011-3416

Name of the Vulnerable Software and Affected Versions HP Network Node Manager i NNMi versions 9.0x Description The issue allows local users to read or modify log files or other data. The exact vectors of this issue are not specified. Recommendations For HP Network Node Manager i NNMi versions 9.0...

CVE-2010-3223: Undefined Security Weakness

The user interface in Microsoft Cluster Service MSCS in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to...

CVE-2010-1967

Unspecified vulnerability in HP Insight Software Installer for Windows before 6.1 allows local users to read or modify data via unknown vectors...

CVE-2010-1970

HP Insight Software Installer for Windows (pre-6.1) is affected by CVE-2010-1970. The vulnerability allows local users to read or modify data and potentially gain privileges due to an unspecified flaw in the installer component. Affected product line is HP Insight Software Installer for Windows, ...

mysql: multiple insufficient table name checks

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...

php: exif_read_data crash on corrupted JPEG files

The exifreaddata function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service crash via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353...

Ubuntu Update for firefox vulnerabilities USN-690-3

Ubuntu Update for Linux kernel vulnerabilities USN-690-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN6903.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox vulnerabilities USN-690-3 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Code injection

Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service device hang and read data from a COM or LPT device via a DOS device name with an arbitrary extension...