Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00650)

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software. oracle iStore is one of the e-business applications that enable merchants to efficiently build, deploy, manage, and personalize their Internet storefronts. iStore is an e-commerce...

Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00642)

Oracle E-Business Suite is a suite of fully integrated, global business management software from Oracle Corporation. Oracle Common Applications also known as Oracle Common Application Calendar, CAC is one of the components that can simplify the management of daily activities, appointments, and...

Oracle GlassFish Server Remote Security Vulnerability (CNVD-2017-00929)

Oracle GlassFish Server is the United States Oracle Oracle company's set of Java Platform, Java EE 6 specification can be realized solution. The solution provides flexible, lightweight and ready to use for the development of applications Java EE 6 application server. A remote security vulnerabili...

Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00653)

Oracle E-Business Suite E-Business Suite is a fully integrated set of Oracle's global business management software. Oracle Customer Intelligence is one of the Web-based customer information viewer, customer data analyzer and customer performance monitor components. A remote vulnerability exists i...

Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00652)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A remote vulnerability exists in Oracle Installed Bas...

H2O use-after-free vulnerability

Overview H2O is an open source web server software. H2O contains a use-after-free vulnerability CWE-416 due to a flaw in the process of upgrading from HTTP/1 to HTTP/2. Kazuho Oku reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and Kazuho Oku coordinated...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2016-10122)

Oracle PeopleSoft Enterprise is a set of enterprise human capital management solutions from Oracle Oracle. The program provides human capital management, financial management, supplier relationship management and other functions. A remote security vulnerability exists in the Oracle PeopleSoft...

CVE-2016-1469

The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service device outage via a series of malformed HTTP requests, aka Bug ID CSCut67385...

Cisco Firepower Management Center and ASA 5500-X Series with FirePOWER Services Elevation of Privilege Vulnerability

Cisco Firepower Management Center and Cisco ASA 5500-X Series with FirePOWER Services are both next-generation firewall software from Cisco. An elevation of privilege vulnerability exists in the web-based GUI in Cisco Firepower Management Center and Cisco ASA 5500-X Series with FirePOWER Services...

UBUNTU-CVE-2016-2113

Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate...

UBUNTU-CVE-2016-2525

epan/dissectors/packet-http2.c in the HTTP/2 dissector in Wireshark 2.0.x before 2.0.2 does not limit the amount of header data, which allows remote attackers to cause a denial of service memory consumption or application crash via a crafted packet...

Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing hackers to replace web pages

The vulnerabilities of Internet Explorer and Microsoft Edge exist due to deficiencies in the implementation of HTTP responses. Exploiting these vulnerabilities allows a malicious actor to replace websites using a specially crafted URL...

curl: Negotiate not treated as connection-oriented

It was discovered that libcurl could incorrectly reuse Negotiate authenticated HTTP connections for subsequent requests. If an application using libcurl established a Negotiate authenticated HTTP connection to a server and sent subsequent requests with different credentials, the connection could ...

Unspecified Vulnerability in Oracle Hyperion BI+

Oracle Hyperion BI+ is a business intelligence program. A security vulnerability exists in Oracle Hyperion BI+. It allows attackers to exploit this vulnerability to compromise the 'Reporting and Analysis' subcomponent over the HTTP protocol...

Cisco Hosted Collaboration Solution Information Disclosure Vulnerability

Cisco Hosted Collaboration Solution HCS is a cloud service that provides communication and collaboration solutions. A security vulnerability exists in Cisco Hosted Collaboration Solution SOAP that could be exploited by an attacker to obtain sensitive information and perform unauthorized access...

Multiple Memory Corruption Vulnerabilities in Privoxy

Privoxy is a proxy server with filtering for HTTP and HTTPS protocols, often used in combination with Tor. Privoxy has several memory corruption vulnerabilities that can be exploited by attackers to obtain sensitive information or cause a denial of service...

UBUNTU-CVE-2012-2125

RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle attack...

OpenJDK HttpURLConnection request splitting (6952017)

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...

OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877

Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to cause a denial of service memory consumption via crafted HTTP headers, which are not...

wireshark HTTP dissector flaws

Unspecified vulnerability in the HTTP dissector for Wireshark formerly Ethereal 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted chunked messages...