Oracle WebLogic Server Multiple Vulnerabilities (April 2016 CPU)

Binary data oracleweblogicservercpuapr2016.nbin...

CVE-2016-0688

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components...

CVE-2016-0674

Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality and integrity via vectors related to Email...

Code injection

Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality and integrity via vectors related to Email...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components...

CVE-2016-0688

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components...

CVE-2016-0688

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components...

CVE-2016-0688

CVE-2016-0688 is an unspecified vulnerability in Oracle WebLogic Server Core Components within Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3. The connected IBM bulletin classifies this CVE under the WebLogic Server Core Components entry and notes a CVSS base score of 7.5 with no confidentia...

CVE-2016-0674

The CVE-2016-0674 entry relates to Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core – Common Components (Email) vulnerability. The connected Nessus/CPU references indicate two related issues in 8.1.1/8.2.2: (1) Siebel UI Framework (UIF Open UI) and (2) Siebel Core – Common Componen...

FBT-40 by newgen medicals - Certificates or keys found, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application FBT-40 by newgen medicals published at the 'play' market has multiple vulnerabilities...

FreeBSD : squid -- multiple vulnerabilities (e05bfc92-0763-11e6-94fa-002590263bf5)

Squid security advisory 2016:5 reports : Due to incorrect buffer management Squid cachemgr.cgi tool is vulnerable to a buffer overflow when processing remotely supplied inputs relayed to it from Squid. This problem allows any client to seed the Squid manager reports with data that will cause a...

Oracle Siebel CRM Siebel Core-Common Components Component Information Disclosure Vulnerability

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions, which includes sales management, marketing management, customer service systems, call centers and other modules.Siebel Core - Common Components is one of the public components. A...

Gateway Edge Service: Zuul

Zuul is a gateway service that provides dynamic routing, monitoring, resiliency, security, and more. Zuul is the front door for all requests from devices and web sites to the backend of the Netflix streaming application. As an edge service application, Zuul is built to enable dynamic routing,...

NUnit: source code security analysis report

Several vulnerabilities were discovered in NUnit.org 'NUnit' software: Использование статических генераторов псевдослучайных чисел в криптографических целях Некорректная фильтрация пользовательского ввода при передаче управления сторонним компонентам Некорректная фильтрация пользовательского ввод...

Wearable Widgets - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Wearable Widgets published at the 'play' market has multiple vulnerabilities...

Sanitization bypass using HTML Entities

Overview Affected versions of marked are susceptible to a cross-site scripting vulnerability in link components when sanitize:true is configured. Proof of Concept This flaw exists because link URIs containing HTML entities get processed in an abnormal manner. Any HTML Entities get parsed on a...

Okey Plus - Corrupted files, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Okey Plus published at the 'play' market has multiple vulnerabilities...

TouristEye - Travel Guide - Corrupted files, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application TouristEye - Travel Guide published at the 'play' market has multiple vulnerabilities...

Jamaica Experiences - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Jamaica Experiences published at the 'play' market has multiple vulnerabilities...

Network Discovery - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Network Discovery published at the 'play' market has multiple vulnerabilities...