CVE-2017-10214

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xstore Office. Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-10211

Oracle Hospitality Applications – Hospitality Suite8 WebConnect (affected version 8.10.x) contains a vulnerability that is easily exploitable over HTTP with network access and requires user interaction. An unauthenticated attacker can potentially update, insert, or delete data and also read a sub...

CVE-2017-10027

The CVE-2017-10027 entry concerns Oracle PeopleSoft: Fluid Homepage & Navigation within PeopleTools. Affected are PeopleSoft 8.54 and 8.55. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to read and modify some PeopleTools data, with user interaction required. CV...

CVE-2017-10106

CVE-2017-10106 affects Oracle PeopleSoft Enterprise PeopleTools Portal (ToolsRelease 8.54 and 8.55). The vulnerability is a cross-site scripting (XSS) issue in TestServlet/Portal components that allows an unauthenticated, network-accessing attacker to execute scripts via HTTP requests, potentiall...

CVE-2017-10134

CVE-2017-10134 affects Oracle PeopleSoft Enterprise FSCM (subcomponent: eProcurement) on version 9.2. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise FSCM, requiring user interaction. Successful exploitation can lead to unauthorized update/insert/delet...

PT-2017-11058

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.7.0 Description The issue affects the BI Publisher component, specifically the Mobile Service subcomponent. It allows a low-privileged attacker with network access via HTTP to compromise BI Publisher,...

CVE-2017-6873

A vulnerability was discovered in Siemens OZW672 all versions and OZW772 all versions that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle MITM attack on the integrated web server on port 443/tcp...

PT-2017-11162

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Field Service, requiring human interaction from a person other than the attacker...

CVE-2017-3651: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client mysqldump. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple...

CVE-2017-6873: Missing Authentication for Critical Function

A vulnerability was discovered in Siemens OZW672 all versions and OZW772 all versions that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle MITM attack on the integrated web server on port 443/tcp...

PT-2017-11172

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation, requiring human interaction from a...

PT-2017-17388

Name of the Vulnerable Software and Affected Versions Siemens OZW672 all versions Siemens OZW772 all versions Description A vulnerability was discovered that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle MITM attack on the integrated web...

CVE-2017-12424

In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes with a buffer overflow or other memory corruption or other unspecified behaviors. This crosses a privilege boundary in, for example,...

Buffer overflow

In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes with a buffer overflow or other memory corruption or other unspecified behaviors. This crosses a privilege boundary in, for example,...

Oracle Hospitality Reporting and Analytics Remote Vulnerability (CNVD-2017-27173)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

mysql: Server: DML unspecified vulnerability (CPU Jan 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...

mysql: Server: DML unspecified vulnerability (CPU Apr 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple...

MAWK 1.3.3-17 - Local Buffer Overflow

!/usr/bin/python Developed using Exploit Pack - http://exploitpack.com - Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Tested on: GNU/Linux - Kali 2017.1 Release Description: MAWK AWK Interpreter 1.3.3-17 and prior is prone to a stack-based buffer overflow vulnerability because...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-17017)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: DML subcomponent of the MySQL Server component of Oracle MySQL. A remotely authorized attacker...

PT-2017-11227

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.1.24 Description The issue allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in...