CVE-2019-1010084

Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to data. The component is: Incorrect calls to ensureauth wrapper result in authentication-checking not being applied to al routes...

Oracle Food and Beverage Applications Hospitality Simphony Component Access Control Error Vulnerability

Oracle Food and Beverage Applications is a suite of food and beverage sales management solutions from Oracle, of which Hospitality Simphony is a cloud-based mobile food and beverage sales component. A security vulnerability exists in version 18.2.1 of the Hospitality Simphony component of Oracle...

Oracle Hyperion Hyperion Planning Component Access Control Error Vulnerability

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closure, report production and other functions. Hyperion Planning is one of the planning task component. A security vulnerability exists in the Smart View...

Oracle GraalVM Access Control Error Vulnerability

Oracle GraalVM is the United States Oracle Oracle company's set of instant compiler written in the Java language. The product supports a variety of programming languages and execution modes.GraalVM Enterprise Edition is the enterprise version of GraalVM. A security vulnerability exists in the Jav...

Unspecified Vulnerability in Oracle FLEXCUBE Investor Servicing (CNVD-2019-30455)

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management, etc. FLEXCUBE Investor Servicing is one of the real-time, online coverage of retail, group, investment banking comprehensive...

Oracle Database Server Java VM Component Access Control Error Vulnerability

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Java VM is one of the Java virtual machine components. A security vulnerability exists in the Java VM...

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27772)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27767)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Oracle Java SE Access Control Error Vulnerability (CNVD-2019-26746)

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in the JSSE subcomponent of Oracle Java SE versions 11.0.3 and 12.0.1. An attacker could...

Oracle Java SE Access Control Error Vulnerability (CNVD-2019-26747)

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. An access control error vulnerability exists in the Security subcomponent of Oracle Java SE versions 7u221, 8u212, and...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26666)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Replication subcomponent of the MySQL Server component in Oracle MySQL, version...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26526)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Security: Audit subcomponent of the MySQL Server component in Oracle MySQL,...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26665)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the MySQL Server component of Oracle MySQL, version 5.7.26 and earlier, and the Server:...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26539)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server : Compiling subcomponent of the MySQL Server component in Oracle MySQL, versions...

Oracle MySQL Server Component Input Validation Error Vulnerability (CNVD-2019-26675)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. Input validation error vulnerability in the InnoDB subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.16 and earlier. An attacke...

Oracle MySQL Server Component Input Validation Error Vulnerability (CNVD-2019-26674)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. Input validation error vulnerability in the InnoDB subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.16 and earlier. An attacke...

PT-2019-2840

Name of the Vulnerable Software and Affected Versions Oracle Clusterware version 12.1.0.2.0 Description The issue is related to insufficient access control in the Trace File Analyzer TFA Collector component of Oracle Clusterware, allowing an unauthenticated attacker with network access via multip...

Oracle Java SE and Java SE Embedded Access Control Error Vulnerability (CNVD-2019-26753)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26527)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Replication subcomponent of the MySQL Server component in Oracle MySQL, version...

Oracle Hyperion Workspace Component Access Control Error Vulnerability

Oracle Hyperion is a set of financial modeling applications from Oracle USA. The software provides financial closure, report production, etc. Hyperion Workspace is one of the modular business intelligence platform. The platform can be in a single coordinated environment for a variety of data...