Oracle FLEXCUBE Investor Servicing Unauthorized Modification Vulnerability (CNVD-2017-06278)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking and asset management. Oracle FLEXCUBE Investor Servicing is one of the components that provides life-cycle processing of cross-business hedge funds, mutual funds and unit-linke...

Oracle MySQL Server Unauthorized Modification Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: DDL subcomponent of the MySQL Server component in Oracle MySQL. An attacker could exploit this...

Oracle PeopleSoft Enterprise FIN Receivables Unauthorized Modification Vulnerability

Oracle PeopleSoft Products is a set of Oracle's enterprise human capital management solutions, which provides human capital management, financial management, supplier relationship management and other functions.PeopleSoft Enterprise FIN Receivables is one of the financial expense revenue manageme...

CVE-2016-4032

CVE-2016-4032 concerns Samsung devices (Galaxy S6, Note 3, Galaxy S4 variants) where AT commands can be executed because the devices do not block AT+USBDEBUG and AT+WIFIVALUE when connected to a Linux host. The issue enables an attacker with AT access to modify Android settings on affected builds...

DEBIAN-CVE-2017-1001000

The registerroutes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before 4.7.2 does not require an integer identifier, which allows remote attackers to modify arbitrary pages via a request for wp-json/wp/v2/posts followed by a...

HPESBUX03706 rev.1 - HP-UX NTP service running ntpd, Multiple Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Denial of Service DoS, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX 11i v3 HPUX-NTP B.11.31 - NTP 4.2.8 prior to C.4.2.8.2.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | ---...

Design/Logic Flaw

IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes...

PT-2017-7609

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy affected versions not specified Description The issue allows an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of...

CVE-2016-5552

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with...

PT-2017-7725

Name of the Vulnerable Software and Affected Versions CA Service Desk Manager version 12.9 CA Service Desk Management version 14.1 Description The issue concerns incorrect permissions applied to RESTful requests, potentially allowing remote authenticated users to read or modify task information...

Unauthorised Modification Of Permission Scope

spring-security-oauth2 is vulnerable to unauthorised modification of scope. A malicious user can submit a scope parameter during token request, which will be accepted by the server. This allows the malicious user to gain a wider scope of permissions when they authenticate...

Design/Logic Flaw

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which allows local users to modify data by writing to a file...

phpIPAM <= 1.2.1 Multiple Vulnerabilities

phpIPAM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpipam:phpipam"; ifdescription...

CPython Man In The Middle Attack Vulnerability

CPython suffers from a man in the middle attack vulnerability via a crafted certificate. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

F5 Networks BIG-IP : Libpng vulnerability (K81903701)

Buffer overflow in the pngsetPLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a small...

CloudBees Jenkins CI and Jenkins LTS Unauthorized Modification Vulnerability

CloudBees Jenkins CI formerly known as Hudson Labs is a Java-based continuous integration tool from CloudBees, Inc. It is mainly used to monitor ongoing software releases/testing projects and a number of timed tasks.LTS Long-Term Support is a long-supported version of CloudBees Jenkins CI is a...

CloudBees Jenkins CI and Jenkins LTS Unauthorized Modification Vulnerability (CNVD-2016-03157)

CloudBees Jenkins CI formerly known as Hudson Labs is a Java-based continuous integration tool from CloudBees, Inc. It is mainly used to monitor ongoing software releases/testing projects and a number of timed tasks.LTS Long-Term Support is a long-supported version of CloudBees Jenkins CI is a...

PT-2016-4445

Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions prior to 4.6 Description The issue allows remote authenticated users to modify objects due to a lack of intended Access Control Lists ACLs for configuration objects. ACLs are used to define access rights for users, a...

CVE-2015-8482

CVE-2015-8482 affects the Blue Coat Unified Agent prior to 4.6.2. In local enforcement mode, the agent does not prevent modification of its configuration files, allowing a locally privileged administrator to unblock categories or disable the agent via unspecified vectors. The issue is mitigated b...

SA102 : Unifed Agent Configuration Changes are not Detected

SUMMARY Configuration files for Unified Agent running in local enforcement mode can be modified by administrators on the client. Configuration files can be modified to unblock categories or to disable Unified Agent entirely. AFFECTED PRODUCTS Unified Agent --- CVE | Affected Versions | Remediatio...