CVE-2017-10269

The CVE-2017-10269 entry concerns Oracle Tuxedo (a core component of Oracle Fusion Middleware) with affected versions 11.1.1, 12.1.1, 12.1.3, 12.2.2. Connected sources describe the issue as part of the Jolt protocol vulnerabilities (JoltandBleed) in Oracle Tuxedo/Jolt Server, enabling unauthentic...

The vulnerability of the Elastic Cloud Storage storage platform, combined with the use of a pre-installed account, allows attackers to gain access to the system.

The vulnerability of the Dell EMC Elastic Cloud Storage ECS storage platform is related to the use of a pre-installed emcservice account. Exploiting this vulnerability allows an attacker operating remotely to gain access to the system and compromise the confidentiality, integrity, and accessibili...

The vulnerability of the ftptpd component in the microprogramming software of TP-Link Technologies CO.,LTD.’s C2 and C20i routers allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the ftptpd component in the C2 and C20i router microprogramming systems is related to the use of pre-installed accounts admin, guest, and test, with passwords “1234”, “guest”, and “test” respectively. Exploiting this vulnerability allows a malicious actor to compromise the...

The vulnerability of the ReadEnhMetaFile function (coders/emf.c) in the console-based image editing tool ImageMagick allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ReadEnhMetaFile function in the console-based image editing tool ImageMagick is related to pointer aliasing errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2020-6701

Name of the Vulnerable Software and Affected Versions FasterXML Jackson Databind affected versions not specified Description A flaw in FasterXML Jackson Databind allows vulnerability to XML external entity XXE attacks due to improper entity expansion security. The highest threat from this issue i...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Identity Manager Component (CNVD-2017-35618)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other functionality.Oracle Identity Manager is one of the enterprise identity management system...

The vulnerability of the FaxFinder fax server, related to errors in managing registration data, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of these data.

The vulnerability of the FaxFinder fax server stems from errors in the management of registration data, which are embedded in the original HTML code /systemconfiguration/ldap in an open manner. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, an...

The vulnerability in the web interface of the Cisco IOS XE operating system allows attackers to enhance their privileges and affect the confidentiality, integrity, and accessibility of data.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to deficiencies in access control for new users—specifically, the access settings that are configured for users through the web interface. Exploiting this vulnerability allows a malicious actor to enhance their...

The vulnerability of the PostscriptDelegateMessage function (coders/ps.c) in the console-based image editing tool ImageMagick allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PostscriptDelegateMessage function coders/ps.c in the console-based image editing tool ImageMagick is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the `sixel_output_create` function (coders/sixel.c) in the console-based graphic editor ImageMagick allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sixeloutputcreate function in the console-based image editing tool ImageMagick is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Vulnerability in the UI framework of the Android operating system, which allows attackers to enhance their privileges and affect the confidentiality, integrity, and accessibility of data.

The vulnerability in the Android operating system’s UI framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the TIFFIgnoreTags component (coders/tiff.c) in the console-based graphic editor ImageMagick allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the TIFFIgnoreTags component coders/tiff.c in the console-based graphic editor ImageMagick is related to pointer aliasing errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PT PeopleTools Component (CNVD-2017-31835)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PT PeopleTools is one of the tools and technology platform components...

Oracle Retail Applications Unspecified Vulnerability in Oracle Retail Point-of-Service Component

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. Oracle Retail Point-of-Service is one of the retail point-of-service management components. An unspecified vulnerability exists in the Security subcomponent of the Oracle Retail...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Component (CNVD-2017-31849)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the Human Capital Management HCM components. An unspecified...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox Component (CNVD-2017-31307)

Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. An unspecified vulnerability exists in the Core subcomponent of the Oracle VM VirtualBox component of Orac...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2017-31839)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2017-31838)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

CVE-2017-10397

Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications subcomponent: BaseMasterPage. The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Code injection

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Enterprise Portal. The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...