CVE-2017-3477

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 12.0.0 and 12.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

ZOHO ManageEngine Applications Manager Elevation of Privilege Vulnerability

ZOHO ManageEngine Applications Manager is a set of application performance monitoring software from ZOHO. An elevation of privilege vulnerability exists in ZOHO ManageEngine Applications Manager versions 12 and 13. An attacker can exploit this vulnerability to gain elevated privileges...

CVE-2016-9148

Cross-site scripting XSS vulnerability in CA Service Desk Manager formerly CA Service Desk 12.9 and 14.1 allows remote attackers to inject arbitrary web script or HTML via the QBE.EQ.REFNUM parameter...

CVE-2017-3398

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

Oracle FLEXCUBE Direct Banking Remote Vulnerability (CNVD-2017-00980)

Oracle FLEXCUBE Direct Banking is a suite of Internet and mobile banking solution components from Oracle. A remote security vulnerability exists in Oracle FLEXCUBE Direct Banking version 12.0.2 and version 12.0.3. An attacker can exploit the vulnerability via the 'HTTP' protocol and the 'Pre-Logi...

Unspecified Vulnerability in Oracle E-Business Suite Oracle CRM Technical Foundation Component (CNVD-2017-00858)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Oracle CRM Technical Foundation ...

BlackBerry Enterprise Server Information Disclosure Vulnerability

BlackBerry Enterprise Server BES is a wireless solution from BlackBerry Canada. The solution provides a unified architecture for mobile devices to access enterprise applications, wireless email communications. coreand Management Console is one of the management consoles. An information disclosure...

Unspecified Vulnerability in Oracle Financial Services Applications Oracle FLEXCUBE Enterprise Limits and Collateral Management Component

Oracle Financial Services Applications is Oracle's suite of financial services software that combines core banking, online banking, and property management.Oracle FLEXCUBE Enterprise Limits and Collateral Oracle FLEXCUBE Enterprise Limits and Collateral Management is one of the components used to...

Cisco IOS Security Bypass Vulnerability (CNVD-2016-09463)

Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS version 12.233SXJ9, which can be exploited by remote attackers to bypass established access restrictions...

CVE-2016-6392

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service device restart via a crafted IPv4 Multicast Source Discovery Protocol MSDP Source-Active SA message, aka Bug ID CSCud36767...

CVE-2016-3524

Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via vectors related to Configuration...

Unspecified Vulnerability in Oracle E-Business Suite Internet Expenses (CNVD-2016-05411)

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 contain a security vulnerability in the Knowledge Management component that can be exploited by remote attackers to compromis...

Unspecified Vulnerability in Oracle E-Business Suite Marketing

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3 contain a security vulnerability in the Marketing component, which can be exploited by remote attackers to compromise confidentiality, integrity...

Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2016-04937)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS versions 12.4 and 15.0 through 15.5 and IOS XE versions 3.13 through 3.17. A remote attacker could exploit this vulnerability to cause a denial of...

Symantec Endpoint Protection Manager and Client Unauthorized Access Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, Inc.SEP Manager and Client are the management and client software. An unauthorized access vulnerability exists in SEP Manager and Client version 12.1, which can be exploited by an attacker to access the PHP JSESSIONI...

Symantec Endpoint Protection Manager and Client Privilege Gain Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, Inc.SEP Manager and Client are the management and client software. A privilege acquisition vulnerability exists in SEP Manager and Client version 12.1, which can be exploited by an attacker to obtain a valid system...

CVE-2016-3653

Multiple cross-site request forgery CSRF vulnerabilities in management scripts in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allow remote authenticated users to hijack the authentication of arbitrary users...

Symantec Endpoint Protection Manager Cross-Site Request Forgery Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. A cross-site request forgery vulnerability exists in SEPM version 12.1. An attacker coul...

Symantec Endpoint Protection Manager and Client Server-Side Request Forgery Vulnerability

Symantec Endpoint Protection SEP is the United States Symantec Symantec company's set of antivirus software the software can provide security across physical and virtual systems SEP Manager and Client is one of the management and client software. A server-side request forgery vulnerability exists...

Fonality HUDweb for Google Chrome Plugin Arbitrary Code Execution Vulnerability

Fonality formerly known as Trixbox pro is an open-source telephone switch solution with integrated VoIP and CRM features from Fonality, USA. The solution supports voicemail, multi-party voice conferencing and interactive voice response IVR. An arbitrary code execution vulnerability exists in the...