Code injection

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Net. Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors...

CVE-2017-10270

CVE-2017-10270 affects Oracle Fusion Middleware, specifically the Oracle Identity Manager Connector component (Microsoft Active Directory subcomponent). The vulnerable item is Oracle Identity Manager Connector version 9.1.1.5.0; the issue allows an unauthenticated attacker with local access to th...

CVE-2017-10270

Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware subcomponent: Microsoft Active Directory. The supported version that is affected is 9.1.1.5.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracl...

CVE-2017-10270

Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware subcomponent: Microsoft Active Directory. The supported version that is affected is 9.1.1.5.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracl...

CVE-2017-10203

Removed by vendor...

CVE-2017-10203

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Net. Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors...

CVE-2017-10277

CVE-2017-10277 concerns a vulnerability in the Oracle MySQL Connector/Net subcomponent of MySQL Connectors, affecting 6.9.9 and earlier. The issue enables an unauthenticated attacker with network access (via multiple protocols) to read, update, insert, or delete data in affected Connector/Net dat...

CVE-2017-10277

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Net. Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors...

CVE-2017-10203

CVE-2017-10203 affects Oracle MySQL Connector/Net in the MySQL Connectors component. Affected versions are 6.9.9 and earlier. The vulnerability allows an unauthenticated attacker with network access via multiple protocols to cause a partial denial of service of MySQL Connectors. CVSS v3.0 base sc...

Oracle MySQL Connector/Net Subcomponent Denial of Service Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Connectors is one of the drivers to connect applications that use MySQL. A security vulnerability exists i...

Oracle MySQL Connector/Net Subcomponent Unauthorized Operation Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Connectors is one of the drivers to connect applications that use MySQL. A security vulnerability exists i...

CVE-2017-14941

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

Design/Logic Flaw

Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authenticated user to retrieve stored Data Source passwords by accessing flow.html and reading the HTML source code of the page reached in an Edit action for a Data Source connector...

SUSE-SU-2017:2591-1 Security update for mysql-connector-java

This update for mysql-connector-java to version to 5.1.42 fixes several issues. These security issues were fixed: - CVE-2017-3589: An unspecified vulnerability in MySQL Connector/J could have resulted in unauthorized update, insert or delete access to some of MySQL Connectors accessible data...

Cisco Cloud Web Security Security Restriction Bypass Vulnerability

Cisco Cloud Web Security is the United States Cisco Cisco company's set of network security protection software. connector engine is one of the connector engine. A security vulnerability exists in the connector engine in Cisco Cloud Web Security, which stems from the program's failure to properly...

Unable to Configure Citrix App Layering ELM PVS Connector

The App Layering Agent PVS Agent on the PVS server is registered with the App Layering ELM virtual appliance, and the PVS Server enumerates on the App Layering PVS connector screen. However,clicking "check credentials" an error is displayed stating that the ELM cannot use the credentials on the P...

PKI entities connection test intermittently fails to connect to CA server via cloud connector

The cloud connectors could not connect to PKI server. The below error is generated: 2017-08-08T13:55:39.253+0000 | 467782B2FC0AB30F | ERROR | http-nio-14443-exec-15 | MsCertSrvConnector | TestConnection to pki url certnew.cer failed with response Headers: null=HTTP/1.1 401 Unauthorized, and...

Polycom BToE Connector Elevation of Privilege Vulnerability

Polycom BToE Connector is a BToE connector developed by Polycom. A security vulnerability exists in Polycom BToE Connector versions prior to 3.0.0, which originates from a program that assigns weak privileges to the x86\polycom\polycom btoe connector\plcmbtoesrv.exe program file. A local attacker...

Design/Logic Flaw

Polycom BToE Connector before 3.0.0 uses weak permissions Everyone: Full Control for "Program Files x86\polycom\polycom btoe connector\plcmbtoesrv.exe," which allows local users to gain privileges via a Trojan horse file...

CVE-2015-8300

Polycom BToE Connector (pre-3.0.0) exposes weak permissions (Everyone: Full Control) on the file plcmbtoesrv.exe, enabling local privilege escalation via a Trojan horse/file replacement. Multiple sources corroborate that versions prior to 3.0.0 are affected; fixed in version 3.0.0 released March ...