CVE-2010-3599

The CVE-2010-3599 issue affects Oracle Document Capture (NCSECWLib ActiveX), where the WriteJPG method in NCSECWLib can be exploited via a crafted page to overwrite files or trigger a buffer overflow, potentially enabling arbitrary code execution. The vulnerability is reported in Oracle Document ...

CVE-2010-4419

Technical details such as affected components, vulnerable vectors, root cause, or fixes are not publicly provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2010-3598

Affected product: Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5. The issue is described as an unspecified vulnerability relating to the Import Export Utility that allows remote attackers to affect integrity. The Connected documents corroborate multiple CVEs (...

PT-2011-1416

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.4 through 10.1.3.5 Description The issue affects confidentiality and is related to the Import Server in the Oracle Document Capture component. Details about exploitation include the ImportBodyText metho...

PT-2011-1523

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CRM versions 9.0 Bundle 31 and 9.1 Bundle 6 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Order Capture. Recommendations For...

PT-2011-1419

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.4 through 10.1.3.5 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Import Export Utility in the Oracle Document...

PT-2011-1420

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.4 through 10.1.3.5 Description The issue affects the integrity and availability of the system, related to the Import Server in the Oracle Document Capture component. It is claimed that remote attackers...

CVE-2010-3595: Undefined Security Weakness

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has no...

CVE-2010-4419: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle 31 and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Order Capture...

CVE-2010-3598: Undefined Security Weakness

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Import Export Utility...

CVE-2010-3591: Undefined Security Weakness

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations. NOTE: the previous information was obtained from...

CVE-2010-3599: Undefined Security Weakness

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU...

PT-2011-1412

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.4 through 10.1.3.5 Description The issue affects confidentiality, integrity, and availability. It is related to Internal Operations in the Oracle Document Capture component. There are claims that remote...

CVE-2010-3592: Undefined Security Weakness

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Internal Operations...

HTTP Client MS Credential Catcher

This module attempts to quietly catch NTLM/LM Challenge hashes. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework NTLMCONST = Rex::Proto::NTLM::Constants NTLMCRYPT = Rex::Proto::NTLM::Crypt MESSAGE =...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Oracle Database Multiple Vulnerabilities (October 2010 CPU)

The remote Oracle database server is missing the October 2010 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Enterprise Manager Console - Java Virtual Machine - Change Data Capture - OLAP - Job Queue - XDK - Core RDBMS - Perl...

CVE-2010-1844

Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to cause a denial of service memory consumption and system crash via a crafted image...

Design/Logic Flaw

Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to cause a denial of service memory consumption and system crash via a crafted image...

CVE-2010-1844

Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to cause a denial of service memory consumption and system crash via a crafted image...