The vulnerability of the sub-component Application Server of the PeopleSoft Enterprise PT PeopleTools component of the Oracle PeopleSoft Products allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Application Server sub-component of the PeopleSoft Enterprise PT PeopleTools business application suite from Oracle PeopleSoft Products is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

The vulnerability of the Siebel Core component – the Server BizLogic Script of the Siebel CRM system’s customer relationship management module – allows an attacker to access, modify, add, or delete data, and to cause a partial service disruption.

The vulnerability of the Siebel Core component – the Server BizLogic Script of the Siebel CRM system’s customer relationship management software – is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, and...

The vulnerability of the Fluid sub-component of the PeopleSoft Enterprise PeopleTools business application suite from Oracle PeopleSoft allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Fluid sub-component of the PeopleSoft Enterprise PeopleTools business application suite, developed by Oracle PeopleSoft Products, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify...

The vulnerability of the Renewals sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Renewals sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data...

The vulnerability of the WLS Core Components of Oracle WebLogic Server application servers allows attackers to modify, add, or delete data.

The vulnerability of Oracle WebLogic Server’s application server’s WLS core components is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the sub-component “Attachments/File Upload” in Oracle Applications Framework of the Oracle E-Business Suite allows a perpetrator to access, modify, add, or delete data.

The vulnerability of the Attachments/File Upload sub-component in Oracle Applications Framework, a system for automating business processes in Oracle E-Business Suite, is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or...

The vulnerability of the User Interface sub-component of the Oracle Trade Management component in the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the User Interface component of the Oracle Trade Management component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data...

Facebook Collected Contacts from 1.5 Million Email Accounts Without Users' Permission

Not a week goes without a new Facebook blunder. Remember the most recent revelation of Facebook being caught asking users new to the social network platform for their email account passwords to verify their identity? At the time, it was suspected that Facebook might be using access to users' emai...

Oracle E-Business Suite CRM Technical Foundation Component Access Control Error Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. CRM Technical Foundation is one ...

CVE-2019-7551

Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable performing actions as users, including administrative users. This could enable account creation and deletion as well as deletion of information contained within the app...

CVE-2018-4445

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2...

CVE-2018-4445

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2...

CVE-2018-4329

Clearing a history item may not clear visits with redirect chains. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12, Safari 12...

CVE-2018-4329

Clearing a history item may not clear visits with redirect chains. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12, Safari 12...

Arbitrary file deletion

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2...

Arbitrary file deletion

Clearing a history item may not clear visits with redirect chains. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12, Safari 12...

CVE-2018-4445

CVE-2018-4445 concerns the Apple Safari/WebKit issue where selecting "Clear History and Website Data" did not clear history. Affects iOS prior to 12.1.1 and Safari before 12.0.2; fixed by Apple in iOS 12.1.1/Safari 12.0.2 with enhanced data deletion. Mitigation is upgrading to the patched version...

CVE-2018-4445

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2...

CVE-2018-4329

Clearing a history item may not clear visits with redirect chains. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12, Safari 12...

CVE-2018-4329

CVE-2018-4329 concerns Safari history deletion on iOS/macOS: clearing a history item may fail to clear visits with redirect chains. The Red Hat and Apple documentation confirm the root cause was an incomplete data deletion, addressed in Safari/iOS 12 with an improved deletion mechanism. Affected ...