httpd: Padding Oracle in Apache mod_session_crypto

It was discovered that the modsessioncrypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack...

httpd: Padding Oracle in Apache mod_session_crypto

It was discovered that the modsessioncrypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack...

Unspecified Vulnerability in Oracle Retail Warehouse Management System

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. Oracle Retail Warehouse Management System is one of the retail warehouse management components. A security vulnerability exists in the Security subcomponent of the Oracle Retail...

The vulnerability of the TrustZone component of Qualcomm Secure Execution Environment allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Qualcomm’s TrustZone microprogramming software’s Android Secure Execution Environment from the CAF repository is due to a numerical overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and...

Oracle PeopleSoft Enterprise SCM eSupplier Connection Remote Vulnerability

Oracle PeopleSoft eSupplier Connection is an enterprise application from Oracle that provides supplier self-service through an Internet-based portal. A remote security vulnerability exists in Oracle PeopleSoft Enterprise SCM eSupplier Connection. An attacker could compromise the 'Vendor'...

Oracle Real-Time Scheduler Remote Vulnerability

Oracle Utilities Applications is Oracle's suite of utility solutions that provide complete operational applications and cloud services for electric, gas and water utilities, etc. Real-Time Scheduler is one of the components with real-time scheduling capabilities. A security vulnerability exists i...

Oracle MySQL Cluster Denial of Service Vulnerability

Oracle MySQL is an open source relational database management system from Oracle, of which Oracle MySQL Cluster is a highly practical and redundant version for distributed computing environments. A denial of service vulnerability exists in the Cluster:DD subcomponent of the MySQL Cluster componen...

Oracle FLEXCUBE Investor Servicing Unauthorized Modification Vulnerability (CNVD-2017-06278)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking and asset management. Oracle FLEXCUBE Investor Servicing is one of the components that provides life-cycle processing of cross-business hedge funds, mutual funds and unit-linke...

Oracle FLEXCUBE Universal Banking Unauthorized Operation Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle FLEXCUBE Universal Banking is one of the real-time, online coverage of retail, group...Oracle FLEXCUBE Universal Banking is a...

Oracle Marketing Unauthorized Operation Vulnerability (CNVD-2017-06404)

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software, of which Oracle Marketing is a component for managing marketing-related information and processes. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Oracle Sun ZFS Storage Appliance Kit Unauthorized Operation Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the User Interface subsystem subcomponent of the Sun ZFS Storage AK component in Oracle Sun...

Oracle One-to-One Fulfillment Security Bypass Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Oracle One-to-One Fulfillment is one of the...

Oracle Primavera P6 Enterprise Project Portfolio Management Unauthorized Operation Vulnerability

Oracle Primavera Products Suite is a suite of project portfolio management solutions from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 EPPM is one of the components used for project planning, management and execution. Primavera P6 Enterprise Project Portfolio...

Oracle FLEXCUBE Investor Servicing Unauthorized Modification Vulnerability

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking and asset management. Oracle FLEXCUBE Investor Servicing is one of the components that provides life-cycle processing of cross-business hedge funds, mutual funds and unit-linke...

Oracle FLEXCUBE Investor Servicing Remote Vulnerability (CNVD-2017-06277)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking and asset management. Oracle FLEXCUBE Investor Servicing is one of the components that provides life-cycle processing of cross-business hedge funds, mutual funds and unit-linke...

Oracle FLEXCUBE Universal Banking Remote Vulnerability (CNVD-2017-06280)

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle FLEXCUBE Universal Banking is one of the real-time, online coverage of retail, group...Oracle FLEXCUBE Universal Banking is a...

Oracle Sun ZFS Storage Appliance Kit Remote Vulnerability (CNVD-2017-06327)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the RAS subsystems subcomponent of the Sun ZFS Storage AK component of the Oracle Sun Systems...

Oracle VM VirtualBox Remote Vulnerability (CNVD-2017-06471)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation, of which Oracle VM VirtualBox is a virtual machine component. A security vulnerability exists in the Shared Folder subcomponent of the Oracle VM VirtualBox component of Oracle Virtualization. An attacker could...

Oracle WebCenter Sites Unauthorized Operation Vulnerability

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-06398)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: InnoDB subcomponent of the MySQL Server component of Oracle MySQL, version 5.7.17 and earlier. An...