9289 matches found
CVE-2017-3497
Affected product: Oracle Solaris 11.3 (Solaris component of Oracle Sun Systems Products Suite), subcomponent Remote Administration Daemon. Root cause and impact per CNVD/NVD: unauthenticated attacker over network can read, update, insert, or delete Solaris data, and cause partial DOS; CVSSv3 base...
CVE-2017-3497
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Remote Administration Daemon. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...
CVE-2017-3549
Vulnerability in the Oracle Scripting component of Oracle E-Business Suite subcomponent: Scripting Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network...
CVE-2017-3497
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Remote Administration Daemon. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...
CVE-2017-3549
CVE-2017-3549 affects Oracle E-Business Suite (Scripting Administration) with an SQL injection in iesfootprint.jsp. Affected versions include 12.2.3 (and 12.1.1–12.1.3 and 12.2.3–12.2.6 per the April 2017 CPU). The vulnerability permits unauthenticated, network-based access via HTTP to read/modif...
PT-2017-2108
Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite subcomponent: Remote Administration Daemon version 11.3 Description The issue is related to inadequate access control in the Remote Administration Daemon component of the Solaris operating system. It allows an...
CVE-2017-3549: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in the Oracle Scripting component of Oracle E-Business Suite subcomponent: Scripting Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network...
CVE-2017-3497: Undefined Security Weakness
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Remote Administration Daemon. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...
Oracle Solaris Critical Patch Update : apr2017_SRU11_3_17_5_0
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Zone. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker...
Oracle GlassFish Server 3.1.2 Multiple Vulnerabilities
Oracle GlassFish Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
HackerOne: API Last Request Date/Time Not Updating
Hi All, I believe I've found a minor vulnerability with regards to your API last request date/time. However, I could not find any documentation on what this value is supposed to represent / when it should be relied on so I debated reporting this but figured it might in fact be an issue. Descripti...
389 security update
CentOS Errata and Security Advisory CESA-2017:0920 An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
kernel: net: Out of bounds stack read in memcpy_fromiovec
A flaw was found in the Linux networking subsystem where a local attacker with CAPNETADMIN capabilities could cause an out-of-bounds memory access by creating a smaller-than-expected ICMP header and sending to its destination via sendto...
Common Administration Interfaces Detection
Scanner detected a common administration interface. No source data...
"This account is already added. Please select another account to add or press the close button" While Configuring Receiver
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When customer attempts to configure Receiver, he gets an error: This account is already added. Pleas...
Sensitive Information Leak Via Authentication Bypass
console-common is prone to sensitive information leak via an authentication bypass. The vulnerability exists because the administration console is listening on port 4848/TCP by default, allowing the remote attackers to access sensitive data on the server by making TRACE requests against the...
CVE-2017-6002
Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/. The attacker can add any blog entry, and can optionally insert XSS into that entry via the body parameter...
Moxa NPort Information Disclosure Vulnerability
Moxa NPort devices are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
kernel: net: Out of bounds stack read in memcpy_fromiovec
A flaw was found in the Linux networking subsystem where a local attacker with CAPNETADMIN capabilities could cause an out-of-bounds memory access by creating a smaller-than-expected ICMP header and sending to its destination via sendto...
phplist 3.2.6 - SQL Injection Vulnerability
Exploit for php platform in category web applications 1. Introduction Affected Product: phplist 3.2.6 Fixed in: 3.3.1 Fixed Version Link: https://sourceforge.net/projects/phplist/files/phplist/3.3.1/phplist-3.3.1.zip/download Vendor Website: https://www.phplist.org/ Vulnerability Type: SQL...