PT-2017-11089

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.0, 13.1.0, and 13.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Enterprise Manager Base Platform, potentially impacting additional...

PT-2017-11244

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue allows a low-privileged attacker with logon access to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise it. This can result in...

PT-2017-11218

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Fleet Management version 9.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Cruise Fleet Management, resulting in unauthorized access to critical...

CVE-2017-10025: Undefined Security Weakness

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful...

CVE-2017-10085: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileg...

PT-2017-11148

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue affects the BI Publisher component, specifically the BI Publisher Security subcomponent. It allows an unauthenticated attacker with network...

CVE-2017-10214: Undefined Security Weakness

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Xstore Office. Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

PT-2017-11093

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite subcomponent: Kernel version 11 Description The issue allows an unauthenticated attacker with logon to the infrastructure where the software executes to compromise it. Successful attacks require human...

PT-2017-11208

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 8.10.x Description The issue affects the Hospitality Property Interfaces component, specifically the Parser subcomponent. It allows a low-privileged attacker with network access via HTTP to compromise...

PT-2017-11204

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 8.10.x Description A vulnerability in the Hospitality Suite8 component, specifically in the WebConnect subcomponent, allows a low-privileged attacker with network access via HTTP to compromise Hospitalit...

PT-2017-11180

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 1.01 Description The issue allows a low-privileged attacker with logon to the infrastructure to compromise the system, resulting in unauthorized access to critical data or complete access to all accessib...

CVE-2017-10201: Undefined Security Weakness

Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications subcomponent: Other. The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality e7 executes to...

PT-2017-11193

Name of the Vulnerable Software and Affected Versions Oracle Hospitality e7 version 4.2.1 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle Hospitality e7 executes to compromise Oracle Hospitality e7, resulting in unauthorized access to critical...

PT-2017-4278

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the read symbol stabs debugging info function in the rddbg.c component of GNU Binutils, which is associated with reading beyond the boundaries of a data buffer. This...

CVE-2017-10176

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3652

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoco...

Avaya Radvision SCOPIA Desktop SQL Injection Vulnerability

Avaya Radvision SCOPIA Desktop is a high-definition desktop video software. Avaya Radvision SCOPIA Desktop suffers from a SQL injection vulnerability that originates from the program's failure to adequately validate user-supplied data prior to its utility in a SQL query. An attacker could use thi...

Arbitrary file deletion

DISPUTED Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files Audio, Documents, Images, Video, and Voice Notes associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or wh...

Oracle MySQL Server Remote Vulnerability (CNVD-2017-06395)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Client mysqldump subcomponent of the MySQL Server component in Oracle MySQL. An attacker could exploit th...

CVE-2017-3345

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via...