mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoco...

CVE-2017-18042

The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery CSRF vulnerability...

SQL Injection Vulnerability in zzcms 8.2 user/check.php File

zzcms is an enterprise website builder program It is an enterprise website builder program. An SQL injection vulnerability exists in the user/check.php file of zzcms version 8.2, which can be exploited by attackers to access or modify database data...

SQL Injection Vulnerability in zzcms 8.2 user/del.php File

zzcms is an enterprise website builder program It is an enterprise website builder program. zzcms 8.2 version user/del.php file SQL injection vulnerability, attackers can exploit the vulnerability to access or modify the database data...

Code injection

Jenkins Dependency Graph Viewer plugin 0.12 and earlier did not perform permission checks for the API endpoint that modifies the dependency graph, allowing anyone with Overall/Read permission to modify this data...

CVE-2017-1000388

Jenkins Dependency Graph Viewer plugin 0.12 and earlier did not perform permission checks for the API endpoint that modifies the dependency graph, allowing anyone with Overall/Read permission to modify this data...

Unspecified Vulnerability in Oracle Construction and Engineering Suite Primavera Unifier Component

Oracle Construction and Engineering Suite is Oracle's suite of combined management solutions for construction projects, of which Primavera Unifier is a complete project lifecycle management solution component. A security vulnerability exists in the Platform subcomponent of the Primavera Unifier...

Unspecified Vulnerability in Oracle Financial Services Balance Sheet Planning Component

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle Financial Services Balance Sheet Planning is one of the Financial Services Balance Sheet Planning is one of the financial service...

SQL Injection Vulnerability in the Website Construction System of Henan Win Business Technology Co.

Henan Wincom Technology Co., Ltd. is a strategy, creativity, design, technology, service as the core of the Internet company, mainly engaged in website construction, platform building, software development, planning programs and other services. Henan Win Business Technology Co., Ltd. website...

Unspecified Vulnerability in Oracle Hyperion Hyperion BI+ Component (CNVD-2018-01531)

Oracle Hyperion is a suite of financial modeling applications from Oracle that provides financial close, reporting, etc. Hyperion BI+ is one of the Business Intelligence platform components that provides management reporting and analysis on any data source. A security vulnerability exists in the...

Unspecified Vulnerability in Oracle Financial Services Profitability Management Component (CNVD-2018-01706)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management, of which Oracle Financial Services Profitability Management is a financial services profitability management component. Oracle Financial Services...

Unspecified Vulnerability in Oracle Hyperion Hyperion BI+ Component (CNVD-2018-01530)

Oracle Hyperion is a suite of financial modeling applications from Oracle that provides financial close, reporting, etc. Hyperion BI+ is one of the Business Intelligence platform components that provides management reporting and analysis on any data source. A security vulnerability exists in the...

Unspecified Vulnerability in Oracle Communications Unified Inventory Management Component (CNVD-2018-01728)

Oracle Communications is a suite of applications from Oracle Corporation for rapidly delivering and monetizing digital life communications.Oracle Communications Unified Inventory Management is one of the unified inventory management components. A security vulnerability exists in the Portal...

Unspecified Vulnerability in Oracle Financial Services Liquidity Risk Management Component (CNVD-2018-01707)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and asset management. Oracle Financial Services Liquidity Risk Management is one of the financial services liquidity risk management component. A security vulnerability exists...

Unspecified Vulnerability in Oracle Business Intelligence Enterprise Edition Component (CNVD-2018-01733)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other functionality.Oracle Business Intelligence Enterprise Edition is one of the business intelligence...

Unspecified Vulnerability in Oracle Financial Services Price Creation and Discovery Component

Oracle Financial Services Applications is Oracle's suite of core banking, online banking, and property management financial services software. Oracle Financial Services Price Creation and Discovery is one of the financial services price creation and discovery component. A security vulnerability...

CVE-2018-2732

Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-2725

Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network acces...

CVE-2018-2730

Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications subcomponent: Cross Pillar. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail...

CVE-2018-2729

Vulnerability in the Oracle Financial Services Funds Transfer Pricing component of Oracle Financial Services Applications subcomponent: User Interface. Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via...