Oracle PeopleSoft Products PeopleSoft Enterprise SCM Purchasing Unauthorized Operation Vulnerability

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Oracle. The product provides human capital management, financial management, supplier relationship management and other functions. A security vulnerability exists in the Purchasing component of...

Mozilla: Use-after-free when handling a ReadableStream

A flaw was found in Mozilla's Firefox. A race condition can occur when handling a ReadableStream causing a use-after-free memory issue. The highest threat from this vulnerability are to data confidentiality and integrity as well as system availability...

Mozilla: Use-after-free while running the nsDocShell destructor

A flaw was found in Mozilla Firefox. A race condition can occur while running the nsDocShell destructor causing a use-after-free memory issue. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: Serialization gadgets in org.springframework:spring-aop

A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: serialization in weblogic/oracle-aqjms

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: Serialization gadgets in anteros-core

A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: Serialization gadgets in ibatis-sqlmap

A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: Serialization gadgets in shaded-hikari-config

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Mozilla: Use-after-free while running the nsDocShell destructor

A flaw was found in Mozilla Firefox. A race condition can occur while running the nsDocShell destructor causing a use-after-free memory issue. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2019-20636

An out-of-bounds write flaw was found in the Linux kernel. A crafted keycode table could be used by drivers/input/input.c to perform the out-of-bounds write. A local user with root access can insert garbage to this keycode table that can lead to out-of-bounds memory access. The highest threat fro...

Oracle Financial Services Applications FLEXCUBE Core Banking Unauthorized Operation Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. A security vulnerability exists in the Transaction Processing component of FLEXCUBE Core Banking version 4.0 in Oracle...

Unspecified Vulnerability in Oracle Hyperion Financial Management

Oracle Hyperion is a set of financial modeling applications from Oracle. A security vulnerability exists in the Security component of Hyperion Financial Management version 11.1.2.4 in Oracle Hyperion. An attacker could exploit the vulnerability to unauthorized creation, deletion, or modification ...

Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Price Creation and Discovery

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Price Creation and Discover...

Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Funds Transfer Pricing

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Funds Transfer Pricing, whi...

Unspecified Vulnerability in Oracle E-Business Suite iSupport

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the Internet-based customer support...

Unspecified Vulnerability in Oracle Financial Services Applications Insurance Accounting Analyzer

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Insurance Accounting Analyzer, which can be...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2020-23827)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation. The products provide human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise PeopleTools is one of the tools and technology platform...

The vulnerability in the ImageStream::getLine method from the poppler/Stream.cc library used for displaying PDF files allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ImageStream::getLine method in the Poppler/Stream.cc library for displaying PDF files is related to the output of operations that go beyond the acceptable buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data,...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HRMS

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Corporation. The product provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HRMS is one of the human resource management components,...