Oracle iStore Remote Vulnerability (CNVD-2017-26818)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Oracle iStore is one of the ability to allow merchant...

Oracle Application Object Library Remote Vulnerability (CNVD-2017-27315)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Application Object Library AOL, Application Object Library is one of the system management components. A security vulnerability exists in the...

Oracle iStore Remote Vulnerability (CNVD-2017-27300)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Oracle iStore is one of the ability to allow merchant...

Cisco DPC3939 Comcast Firmware Information Disclosure Vulnerability

The Cisco DPC3939 XB3 is a wireless home voice gateway product from Cisco USA.Comcast is a set of firmware developed by Comcast that runs in devices such as gateways and modems. A security vulnerability exists in the Comcast firmware in the Cisco DPC3939 using the...

CVE-2017-11760

uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed of concatenated image data and script data, as demonstrated by uploading as an image within the description text area...

Unspecified Remote Elevation of Privilege Vulnerability in IBM TRIRIGA Application Platform

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

AudioCoder Buffer Overflow Vulnerability

AudioCoder is based on MediaCoder core development of a set of high-performance audio conversion tools, the tool provides multi-tasking parallel audio transcoding, audio file decoding, conversion of network audio streams and other functions.MediaCoder is a free set of general-purpose audio and...

Oracle Solaris Remote Vulnerability (CNVD-2017-18120)

Oracle Sun Solaris is a computer operating system developed by Sun Microsystems. It is a derivative of the UNIX operating system. Oracle Solaris versions 10 and 11 have a security vulnerability in the NFSv4 implementation that allows an attacker to exploit the vulnerability to affect availability...

Oracle Solaris Remote Vulnerability (CNVD-2017-18121)

Oracle Sun Solaris is a computer operating system developed by Sun Microsystems. It is a derivative of the UNIX operating system. Oracle Solaris versions 10 and 11 have a security vulnerability in the IKE implementation that allows an attacker to exploit the vulnerability to affect availability...

Oracle Sun ZFS Storage Appliance Kit Remote Vulnerability (CNVD-2017-18122)

Oracle Sun Solaris is a computer operating system developed by Sun Microsystems. It is a derivative of the UNIX operating system. Oracle Sun ZFS Storage Appliance Kit AK 2013 contains a security vulnerability in the UI interface component, which can be exploited by an attacker to compromise the...

Evince Comic Book Backend Command Injection Vulnerability

Evince is a GNOME desktop environment of a PDF, PostScript, DjVu, TIFF and DVI document viewing tools. A remote command injection vulnerability exists in Evince version 3.24.0. A remote attacker can use this vulnerability to inject and execute arbitrary commands in the context of an affected...

IBM Emptoris Supplier Lifecycle Management Cross-Site Scripting Vulnerability

IBM Emptoris Supplier Lifecycle Management is a suite of automated management solutions from IBM USA. The product automates all business processes associated with suppliers. A cross-site scripting vulnerability exists in IBM Emptoris Supplier Lifecycle Management version 10.1.0.x. A remote attack...

Tilde CMS class.SystemAction.php file SQL injection vulnerability

Tilde CMS is a web content management system CMS. A SQL injection vulnerability exists in the class.SystemAction.php file in Tilde CMS version 1.0.1. A remote attacker can exploit this vulnerability by sending a POST request to /actionphp/action.input.php with the 'id' parameter to execute...

Appserver Directory Traversal Vulnerability

Appserver is a multi-threaded application server written in PHP. A directory traversal vulnerability exists in the Web request/response interface in versions of Appserver prior to 1.0.3. A remote attacker can leverage a specially crafted URL in the '...' in a specially crafted URL to read...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18229)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit has a security vulnerability that allows an attacker to exploit...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18169)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit has security vulnerabilities in its implementation that allow attackers to...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18167)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit is far from being implemented with security vulnerabilities that allow...

Oracle Java SE Remote Vulnerability (CNVD-2017-18123)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE has a security vulnerability. Allowing an attacker to exploit the vulnerability coul...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18231)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit has security vulnerabilities in its implementation that allow attackers to...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18170)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit has security vulnerabilities in its implementation that allow attackers to...