CVE-2017-6508: Improper Neutralization of CRLF Sequences

CRLF injection vulnerability in the urlparse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL...

Android DoS

The vulnerability of the Audioserver component of the libeffects sub-component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

openSUSE Security Update : virtualbox (openSUSE-2017-178)

This update for virtualbox to version 5.0.32 fixes the following issues : These security issues were fixed : - CVE-2016-5545: Vulnerability in the GUI subcomponent of virtualbox allows unauthenticated attacker unauthorized update, insert or delete access to some data as well as unauthorized read...

MariaDB Server 10.1.x < 10.1.21 Multiple Vulnerabilities

Binary data 9915.prm...

MySQL Enterprise Monitor 3.2.x < 3.2.2.1075 Multiple Vulnerabilities (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.2.x prior to 3.2.2.1075. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the bundled version of Apache Tomcat in the Manage...

MySQL Enterprise Monitor 3.1.x < 3.1.4.7895 Agent Subcomponent RCE (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.1.x prior to 3.1.4.7895. It is, therefore, affected by a remote code execution vulnerability in the Agent subcomponent that allows an authenticated, remote attacker to execute arbitrar...

MySQL Cluster 7.3.x < 7.3.9 General Subcomponent DoS (January 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.3.x prior to 7.3.9. It is, therefore, affected by an unspecified flaw in the General subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition. C Tenable Network Security, Inc...

MySQL Cluster 7.2.x < 7.2.20 General Subcomponent DoS (January 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.2.x prior to 7.2.20. It is, therefore, affected by an unspecified flaw in the General subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition. C Tenable Network Security, Inc...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2017-01019)

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

MySQL Cluster 7.4.x < 7.4.6 General Subcomponent DoS (January 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.4.x prior to 7.4.6. It is, therefore, affected by an unspecified flaw in the General subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition. C Tenable Network Security, Inc...

MySQL Cluster 7.2.x < 7.2.26 Multiple DoS (January 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.2.x prior to 7.2.26. It is, therefore, affected by multiple denial of service vulnerabilities : - An overflow condition exists in the NDBAPI subcomponent that allows an unauthenticated, remote attacker to cause a denial of service...

Unspecified Vulnerability in Oracle Java SE (CNVD-2017-00935)

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A remote security vulnerability exists in Oracle Java SE. An...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00947)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Oracle E-Business Suite Local Security Vulnerability

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Oracle E-Business Suite has a local security...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2017-00986)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A security vulnerability exists in the Packaging subcomponent of Oracle MySQL Server, which can be exploited by...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00940)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Oracle FLEXCUBE Core Banking Unauthorized Read Vulnerability

Oracle FLEXCUBE Core Banking is a product of Oracle Corporation Oracle. Its application architecture supports agile and business process management using Business Process Execution Language BPEL, Service-Oriented Architecture SOA, and Web services-based models. An unauthorized read vulnerability...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00944)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00948)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00950)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...