CVE-2017-3602: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

PT-2017-15914

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 12.0.0 and 12.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks can result in unauthorized update,...

Oracle FLEXCUBE Private Banking Remote Vulnerability

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking and asset management. Oracle FLEXCUBE Investor Servicing is one of the components that provides life-cycle processing of cross-business hedge funds, mutual funds and unit-linke...

Oracle Fusion Middleware Oracle WebCenter Sites Component Remote Vulnerability

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

PT-2017-15973

Name of the Vulnerable Software and Affected Versions Java SE versions 6u141, 7u131, and 8u121 Java SE Embedded version 8u121 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require...

PT-2017-15978

Name of the Vulnerable Software and Affected Versions Java SE versions 6u141, 7u131, and 8u121 Java SE Embedded version 8u121 JRockit version R28.3.13 Description A difficult to exploit vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE allows an unauthenticated...

MySQL 5.5.x < 5.5.55 Multiple Vulnerabilities (April 2017 CPU) (Riddle)

The version of MySQL running on the remote host is 5.5.x prior to 5.5.55. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the mysqlprunestmtlist function in client.c that allows an authenticated, remote attacker to cause a denial of service condition...

CVE-2017-3455

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2017-1956

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.17 and earlier Description The issue is related to insufficient access control in the MySQL Server component of Oracle MySQL, allowing an attacker with network access via multiple protocols to compromise the server...

PT-2017-1968

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.17 and earlier Description The issue is related to insufficient access control in the MySQL Server component of Oracle MySQL. It allows an attacker with network access via multiple protocols to compromise the MySQL...

PT-2017-1969

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.17 and earlier Description The issue is related to inadequate access control in the MySQL Server component, specifically in the InnoDB subcomponent. It allows a high-privileged attacker with network access via multipl...

PT-2017-1958

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.17 and earlier Description The issue is related to inadequate access control in the MySQL Server component of Oracle MySQL, allowing an attacker with network access via multiple protocols to compromise the server...

PT-2017-4204

Name of the Vulnerable Software and Affected Versions Nimbus JOSE+JWT versions prior to 4.39 Description The issue is related to insufficient authentication data verification in the Nimbus JOSE+JWT library. This allows attackers to conduct HMAC bypass attacks by manipulating Additional...

PT-2017-1959 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.54 and earlier MySQL Server versions 5.6.35 and earlier MySQL Server versions 5.7.17 and earlier Description: The issue is related to inadequate access control in the MySQL Server component of Oracle MySQL,...

Information disclosure

An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,...

CVE-2017-0584

An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

PT-2017-1910

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description An information disclosure issue in the libmpeg2 component of the Mediaserver could allow a local malicious application to access data outside of its permission levels, potentially leading to...

HPESBGN03728 rev.1 - HPE Operations Agent using OpenSSL, Remote Denial of Service (DoS), Unauthorized Access to Data

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Agent - v11.15, v11.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-2107 |...

PT-2017-1912

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description An information disclosure issue in the Mediaserver's libavc component could allow a local malicious application to access data outside of its permission levels, potentially leading to unauthorized...

go-jose signature obfuscation vulnerability

go-jose is a standard method for implementing JavaScript object signing and encryption . A security vulnerability exists in go-jose. As the program fails to verify the validity of the signature. An attacker could exploit the vulnerability to read unauthorized data...