Unspecified Vulnerability in Oracle FLEXCUBE Investor Servicing (CNVD-2019-30454)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...

Oracle Java SE and Java SE Embedded Access Control Error Vulnerability (CNVD-2019-26751)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26526)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Security: Audit subcomponent of the MySQL Server component in Oracle MySQL,...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26535)

MyOracle MySQL is an open source relational database management system from Oracle, MySQL Server is one of the database server components. An Access Control Error vulnerability exists in the Server: Replication subcomponent of the MySQL Server component of Oracle MySQL, version 5.7.25 and earlier...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26539)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server : Compiling subcomponent of the MySQL Server component in Oracle MySQL, versions...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26536)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server component of Oracle MySQL, version 5.7.25 and earlier, and the Server: Replication subcomponent o...

Oracle Fusion Middleware BI Publisher Component Information Disclosure Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...

Unspecified Vulnerability in Oracle FLEXCUBE Investor Servicing (CNVD-2019-30457)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26692)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the InnoDB subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.16 and...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26687)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. The MySQL Server component in Oracle MySQL, version 5.7.26 and earlier and the Server: Optimizer subcomponent of Oracle MySQL, version 8.0.16 and...

PT-2019-3415

Name of the Vulnerable Software and Affected Versions Java SE versions 7u221, 8u212, 11.0.3, 12.0.1 Java SE Embedded version 8u211 Description The issue is related to insufficient checks in the Java SE and Java SE Embedded components, specifically in the Utilities subcomponent. This allows an...

PT-2019-6353 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.12 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Server: GIS subcomponent. It allows a high-privileged attacker with network access via...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS attacks. The vulnerability exists in the subcomponent Server: DML in the MySQL Server component of Oracle MySQL. A high privileged attacker with network access via multiple protocols could compromise MySQL Server resulting in a frequently repeatable...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown functionality of the subcomponent AWT. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a partial DoS condition...

Important: Red Hat Security Advisory: rhvm-appliance security update

An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Oracle WebLogic Server deserialization remote code execution

Added: 05/02/2019 CVE: CVE-2019-2725 BID: 108074 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem Oracle WebLogic Server component of Oracle Fusion Middleware has a deserialization vulnerability in Web Services subcomponent, which allows...

Oracle Work in Process Messages Sub-component Unauthenticated Access

The vulnerability of the Messages sub-component of the Oracle Work in Process component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the...

BI Publisher Security Sub-component Data Modification

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool formerly XML Publisher is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data using the HTTP protocol...

Oracle Service Contracts Renewals Sub-component Data Modification Privilege

The vulnerability of the Renewals sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data...

CVE-2019-2622

Vulnerability in the Oracle Service Contracts component of Oracle E-Business Suite subcomponent: Renewals. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...