Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-28468)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

Oracle Fusion Middleware WebCenter Portal Access Control Error Vulnerability (CNVD-2020-02562)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. WebCenter Portal is one of the components that seamlessly integrates the portal with enterprise...

Unspecified Vulnerability in Oracle Database Server (CNVD-2019-27101)

Oracle Database Server is the United States Oracle Oracle company's set of relational database management system. Core RDBMS is one of the relational database core components. A security vulnerability exists in the Core RDBMS component of Oracle Database Server version 12.2.0.1 and version 18c. A...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2019-27272)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27270)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-26723)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server : Security : Privileges subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.13 and...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27291)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle Hospitality Simphony (CNVD-2019-37393)

Oracle Food and Beverage Applications is a suite of food and beverage sales management solutions from Oracle. Hospitality Simphony is one of the cloud-based hospitality components. A security vulnerability exists in Oracle Hospitality Simphony 2.10. An attacker could exploit the vulnerability to...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-28458)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

Unspecified Vulnerability in Oracle Hospitality Simphony

Oracle Food and Beverage Applications is a suite of food and beverage sales management solutions from Oracle Corporation, of which Hospitality Simphony is a cloud-based hotel management component. A security vulnerability exists in Oracle Hospitality Simphony 2.10. An attacker could use this...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Access Control Error Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. An access control error vulnerability exists in the Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit. An attacker...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28454)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Content Manager is one of the...

The vulnerability of the Skia graphic library in Google Chrome web browsers allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Skia graphic library in Google Chrome’s web browser is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML...

PT-2019-5774 · Debian · Sympa

Name of the Vulnerable Software and Affected Versions: Debian Sympa package versions prior to 6.2.40dfsg-7 Description: The issue is related to the debian/sympa.postinst component of the Sympa package, which sets incorrect permissions for the sympa newaliases-wrapper. This could allow a remote...

PT-2019-2924

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.x before 2.9.8 Description The issue is related to the inability to block the axis2-transport-jms class from polymorphic deserialization in the FasterXML Java library for parsing JSON files,...

PT-2018-2319

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in the fly-admin-digsig package that leads to incorrect calculation of digital signatures for hidden files. This could allow an attacker to compromise the...

PT-2018-2326

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the acpi-support package in Astra Linux, which lacks support for multi-level mandatory access control. This could allow an attacker to access confidential data,...

The vulnerability of the xcf_load_stream function in the GIMP graphics editor, which involves reading beyond the buffer limit, allows attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the xcfloadstream function /xcf/xcf.c in the GIMP graphic editor, GNU Image Manipulation Program, relates to reading beyond the buffer boundaries during string processing, especially when dealing with strings that do not contain the null character '\0'. Exploiting this...

The vulnerability of the read_creator_block function in the GIMP graphic editor allows for reading beyond the buffer boundary of dynamic memory, enabling attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the readcreatorblock function in the GIMP graphic editor’s plug-in/common/file-psp.c file is related to reading data beyond the buffer boundaries of dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures, compromise data integrity, and...

The vulnerability in the RubyGems package management system arises from improper handling of parameters, allowing users to compromise data integrity.

The vulnerability of the RubyGems package management system is related to the improper handling of HTTP/FTP request parameters, which can lead to incorrect URL formation. Exploiting this vulnerability allows a remote attacker to compromise data integrity...