Oracle WebLogic Server Remote Vulnerability (CNVD-2017-06030)

Oracle WebLogic Server is a Java application server that fully implements the J2EE 1.5 specification, the latest Web services standards, and the highest level of interoperability standards. An unspecified security vulnerability exists in Oracle WebLogic Server, which can be exploited by remote...

Oracle WebCenter Sites Remote Vulnerability (CNVD-2017-05986)

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebCenter Sites is a Web experience management component. Oracle Fusion Middleware versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 of the...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-05849)

Oracle OPERA Property is a Cisco asset management system. A remote security vulnerability exists in the Oracle Hospitality OPERA 5 Property Services component, which can be exploited by remote attackers to compromise system confidentiality...

Oracle WebCenter Sites Remote Vulnerability (CNVD-2017-05989)

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebCenter Sites is a Web experience management component. Oracle Fusion Middleware versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 of the...

Oracle E-Business Suite Remote Vulnerability (CNVD-2017-06027)

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. A security vulnerability exists in the Oracle Advanced Outbound Telephony component, which can be exploited by remote attackers to compromise confidentiality, integrity...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-05848)

Oracle OPERA Property is a Cisco asset management system. A remote security vulnerability exists in the Oracle Hospitality OPERA 5 Property Services component, which can be exploited by remote attackers to compromise system confidentiality...

Oracle FLEXCUBE Universal Banking Remote Vulnerability (CNVD-2017-06018)

Oracle Retail Applications is an e-commerce solution. A remote security vulnerability exists in the Oracle FLEXCUBE Universal Banking component, which can be exploited by remote attackers to compromise system confidentiality...

Oracle FLEXCUBE Universal Banking Remote Vulnerability (CNVD-2017-06022)

Oracle Retail Applications is an e-commerce solution. A remote security vulnerability exists in the Oracle FLEXCUBE Universal Banking component, which can be exploited by remote attackers to compromise system confidentiality...

Oracle FLEXCUBE Universal Banking Remote Vulnerability (CNVD-2017-06017)

Oracle Retail Applications is an e-commerce solution. A security vulnerability exists in the Oracle FLEXCUBE Universal Banking component, which can be exploited by remote attackers to compromise system availability...

Oracle MySQL Enterprise Monitor Remote Vulnerability

Oracle MySQL Server is a lightweight relational database system. A remote security vulnerability exists in Oracle MySQL Enterprise Monitor, which can be exploited by remote attackers to compromise system integrity, confidentiality...

Oracle WebCenter Sites Remote Vulnerability

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. An unspecified security vulnerability exists in Oracle Fusion Middleware WebCenter Sites, which can be exploited by remote attackers to compromise system confidentiality, integrity...

Oracle PeopleSoft Enterprise FSCM Remote Vulnerability

Oracle PeopleSoft Enterprise is an enterprise human capital management solution. A security vulnerability exists in Oracle PeopleSoft Enterprise FSCM, which can be exploited by remote attackers to compromise confidentiality, integrity...

Oracle PeopleSoft Enterprise CS Campus Community Remote Vulnerability

Oracle PeopleSoft is a set of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise CS Campus Community is one of the campus management components. A security vulnerabili...

MantisBT 1.3.x < 1.3.10, 2.x < 2.3.0 Pre-Auth Remote Password Reset Vulnerability

MantisBT is prone to a remote password reset vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Wireshark RPCoRDMA Dissector 'packet-rpcrdma.c' Infinite Loop Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark is prone to a remote denial-of-service vulnerability.Attackers can exploit thi...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-05767)

Microsoft Edge is the web browser built into the Windows 10 version. A memory corruption vulnerability vulnerability exists in the implementation when Microsoft Edge does not properly handle memory objects, which can be exploited by an attacker to execute arbitrary code and corrupt memory...

ImageWorsener 'src/imagew-miff.c' Remote Stack Buffer Overflow Vulnerability

ImageWorsener is a set of image scaling and processing utilities. A security vulnerability exists in the iwmiffrconvertrow32 function in the imagew-miff.c file of libimageworsener.a in ImageWorsener version 1.3.0. A remote attacker can exploit this vulnerability to cause a denial of service heap...

CVE-2017-5969

libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service NULL pointer dereference via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML...

File Containment Vulnerability in Zhongke Dawning Firewall

Dawning Network & Security System, a firewall device, is a security line of defense that protects servers by being installed in the kernel of the operating system. A file inclusion vulnerability exists in the Dawning Firewall that could allow a remote attacker to traverse unspecified vectors to...

CVE-2017-7378

The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...