Oracle E-Business Suite Oracle Applications DBA Component Unauthorized Access Vulnerability

Oracle E-Business Suite E-Business Suite is Oracle's Oracle set of fully integrated global business management software. Oracle Applications DBA is one of the application database management component. An unauthorized access vulnerability exists in the AD Utilities subcomponent of the Oracle...

Privilege escalation

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitiv...

CVE-2016-7031

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL...

SUSE-SU-2016:2395-1 Security update for mariadb

This update for mariadb to 1.0.0.27 fixes the following issues: Security issue fixed: CVE-2016-6662: A malicious user with SQL and filesystem access could create a my.cnf in the datadir and , under certain circumstances, execute arbitrary code as mysql or even root user. bsc998309 release notes:...

CVE-2016-5081

The CVE-2016-5081 entry affects ZModo ZP-NE14-S and ZP-IBH-13W devices (DVR/cameras) due to hard-coded credentials that enable root access via an always-on TELNET service. The root cause is use of undocumented hard-coded credentials and TELNET hardening bypass, allowing remote attackers to obtain...

CVE-2016-3567

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web access...

Vtiger CRM Incorrectly Restricts Access Vulnerability

vtiger CRM is a Web-based sales force automation SFA based customer relationship management system CRM. Vtiger CRM has a security vulnerability. The vulnerability allows an attacker to exploit the vulnerability by failing to restrict access to user information data...

Unauthorized Access Vulnerability in Education Information Management System of Guangzhou Zhongda Dongri Education Technology Co.

Guangzhou Zhongda Dongri Education Technology Co., Ltd. education information management system is to provide an integrated campus information solution. An unauthorized access vulnerability exists in the Education Information Technology Management System of Guangzhou Zhongda Dongri Education...

Microprogramming software for Siemens SIPROTEC 4 relay protection microprocessors

The vulnerability of the software of the Siemens SIPROTEC 4 relay protection micro-processor terminal allows a remote attacker to cause a malfunction of the micro-processor terminal by sending a specially crafted UDP packet to port 50000. This causes the micro-processor terminal to cease...

The vulnerability of the Internet Explorer browser allows a malicious attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability related to accessing confidential information exists in Internet Explorer and allows attackers to send requests to resources stored in memory. Exploiting this vulnerability enables attackers to identify the antivirus software being used and avoid being detected...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the libldap-2.3-0 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the PowerDNS Recursor software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

Overfilling the buffer in the PowerDNS Recursor allows malicious actors operating remotely to cause service failures abrupt termination of the daemon or execute arbitrary code using specially crafted packages...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the krb5-ftpd package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the libkrb5-dbg package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The Linux-headers-2.6.18-6-vserver-powerpc64 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may result in the compromise of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Internet Explorer browser, which allow a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information

Vulnerabilities that allow for the execution of arbitrary code remotely exist in Internet Explorer due to improper access to objects in memory. These vulnerabilities can cause errors when working with memory and allow attackers to execute arbitrary code in the context of the current user...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libxtrap-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

CVE-2016-1394

Cisco Firepower System Software versions 6.0.0–6.1.0 are affected by a hardcoded/default account that allows unauthenticated, remote CLI login by exploiting knowledge of the password (Bug CSCuz56238). The vulnerability stems from a default static password created during installation, enabling the...

CVE-2016-5837

WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors...

CVE-2016-4828

The CVE affects WordPress plugin Collne Welcart e-Commerce, prior to version 1.8.3. A vulnerability in session handling lets a remote attacker log in as a user by knowing the user’s e-mail address, granting user-level access and enabling arbitrary operations as described in multiple sources. Reme...