CVE-2017-10210

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

Design/Logic Flaw

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successfu...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2017-17515)

VirtualBox is cross-platform virtualization software for x86-based systems. A security vulnerability exists in the Core component implementation of Oracle VM VirtualBox versions prior to 5.1.24, which can be exploited by attackers to compromise system integrity and availability...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18126)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit has a security vulnerability that could be exploited by an attacker to...

Tilde CMS 1.01 - Multiple Vulnerabilities

Tilde CMS 1.01 - Multiple Vulnerabilities Exploit Title: Tilde CMS 1.01 Multiple Vulnerabilities Date: July 7th, 2017 Exploit Authors: Paolo Forte, Raffaele Forte Vendor Homepage: http://www.tildenetwork.com/ Version: Tilde CMS 1.0.1 Tested on: Ubuntu 12.04, PHP 5.3.10 I. INTRODUCTION...

Oracle Solaris Local Security Vulnerability (CNVD-2017-06248)

Oracle Sun Solaris is a computer operating system developed by Sun Microsystems. It is a derivative of the UNIX operating system. Oracle Sun Solaris 11.3 has a security vulnerability in its implementation, which can be exploited by a local attacker to compromise system confidentiality, integrity...

Apple macOS Sierra System Integrity Protection Input Validation Vulnerability

Apple macOS Sierra is an operating system developed by Apple for Mac computers.System Integrity Protection is one of the components of System Integrity Protection. An input validation vulnerability exists in the System Integrity Protection component in Apple macOS Sierra versions prior to 10.12.4...

CVE-2017-2318

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will compromise the integrity of the system, or provide elevation of privileges...

Oracle MySQL Enterprise Monitor Remote Vulnerability

Oracle MySQL Server is a lightweight relational database system. A remote security vulnerability exists in Oracle MySQL Enterprise Monitor, which can be exploited by remote attackers to compromise system integrity, confidentiality...

Oracle MySQL Connectors Local Vulnerability

OracleMySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability , etc. MySQLConnectors is one of the connection to the use of MySQL application driver . Oracle MySQL Connectors has a local securi...

Oracle MySQL Server Local Vulnerability

Oracle MySQL Server is a lightweight relational database system. A local security vulnerability exists in Oracle MySQL Connectors that could be exploited by an attacker to compromise system integrity...

Oracle WebCenter Sites Remote Vulnerability

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. An unspecified security vulnerability exists in Oracle Fusion Middleware WebCenter Sites, which can be exploited by remote attackers to compromise system confidentiality, integrity...

CVE-2017-6974

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app...

CVE-2017-6974

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app...

Code injection

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app...

CVE-2017-6974

CVE-2017-6974 affects macOS Sierra prior to 10.12.4 in the System Integrity Protection’s system-installation validation. A crafted application could bypass protections and modify contents at a protected disk location due to a validation issue during installation. The Apple advisory HT207615 lists...

CVE-2017-6974

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app...

macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)

The remote host is running a version of macOS that is 10.12.x prior to 10.12.4. It is, therefore, affected by multiple vulnerabilities in multiple components, some of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these remote code execution...

CVE-2017-5624

An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the locked bootloader start the platform with dm-verity disabled, by issuing the 'fastboot oem disabledmverity' command. Having dm-verity disabled, the kernel will not verify the system...