PT-2017-15834

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue affects the Oracle Advanced Outbound Telephony component, allowing an unauthenticated attacker with network access via HTTP to...

CVE-2017-3275: Undefined Security Weakness

Vulnerability in the Oracle Email Center component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

PT-2017-15857

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue affects the Oracle Advanced Outbound Telephony component, allowing an unauthenticated attacker with network access via HTTP to...

PT-2017-15876

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle CRM Technical Foundation component. Successful attacks require human interaction from a pers...

PT-2017-15829

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue affects the Oracle Advanced Outbound Telephony component, allowing an unauthenticated attacker with network access via HTTP to...

PT-2017-15833

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue affects the Oracle Advanced Outbound Telephony component, allowing an unauthenticated attacker with network access via HTTP to...

PT-2017-15861

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue affects the Oracle Advanced Outbound Telephony component, allowing an unauthenticated attacker with network access via HTTP to...

PT-2017-15818

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, and 12.1.3 Description The issue affects the Oracle Knowledge Management component, specifically the User Interface subcomponent. It allows an unauthenticated attacker with network access via HT...

PT-2017-15874

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle CRM Technical Foundation component. Successful attacks require human interaction from a pers...

PT-2017-15853

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue affects the Oracle Advanced Outbound Telephony component, allowing an unauthenticated attacker with network access via HTTP to...

PT-2017-15846

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue affects the Oracle Advanced Outbound Telephony component, allowing an unauthenticated attacker with network access via HTTP to...

PT-2017-15773

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.5.53 and earlier Oracle MySQL versions 5.6.34 and earlier Oracle MySQL versions 5.7.16 and earlier Description The issue allows an attacker with certain privileges to compromise the MySQL Server, potentially resulting i...

FTC: D-Link Failed to Secure Routers, IP Cameras

The Federal Trade Commission acknowledged on Thursday that it takes the security of the so-called internet of things seriously when it leveraged a complaint against one of the more popular router manufacturers. The lawsuit, filed at the U.S. District Court for the Northern District of California,...

CVE-2016-5546

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with...

UBUNTU-CVE-2016-5546

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with...

Sophos XG Firewall '/userportal/Controller' Terminal SQL Injection Vulnerability

Sophos XG Firewall delivers the performance, control and security of the ultimate enterprise firewall. Featuring unified user, application & network control, instant visibility and powerful management & scalability. Sophos XG Firewall suffers from a SQL injection vulnerability that stems from...

Lepton Add_droplets Parameter SQL Injection Vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. A SQL injection vulnerability exists in the Lepton Adddroplets parameter, which could be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying...

Typo3 Member Infosheets Extended SQL Injection Vulnerability

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. Typo3 Member Infosheets suffers from a SQL injection vulnerability that can be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability in...

Schoolhos CMS 'kelas' Parameter SQL Injection Vulnerability

Schoolhos CMS is a free and open source content management system. A SQL injection vulnerability exists in the kelas parameter of Schoolhos CMS version 2.29, which can be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability in the...

Exponent CMS 'getSection' Function SQL Injection Vulnerability

Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability exists in th...