Unspecified Vulnerability in Oracle Virtualization VM VirtualBox Component (CNVD-2019-36172)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle Hyperion Common Events Component (CNVD-2019-38554)

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial settlement, report production and other functions. Hyperion Common Events is one of the event processing components. A security vulnerability exists in the User...

Unspecified Vulnerability in Oracle E-Business Suite Customer Interaction History (CNVD-2019-40794)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle, which provides customer relationship management, service management, financial management and other functions. The software provides customer relationship management,...

Unspecified Vulnerability in Oracle Siebel CRM Siebel UI Framework Component (CNVD-2019-39882)

Oracle Siebel CRM is a set of customer relationship management solutions from Oracle Oracle. The solution includes modules for sales management, marketing management, customer service systems, call centers, and more. An unspecified vulnerability exists in the Oracle Siebel CRM Siebel UI Framework...

CVE-2018-3166

The CVE-2018-3166 vulnerability affects Oracle Hospitality Applications’ Hospitality Cruise Fleet Management component (Emergency Response System) version 9.0. It allows a low-privilege, network-accessible attacker over HTTP to modify or delete data, with an impact on data integrity (CVSSv3.0: 6....

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Cruise Fleet Management Component (CNVD-2019-37394)

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, provides tracking and management of customer services throughout the journey to improve...

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Cruise Fleet Management Component (CNVD-2019-37395)

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, provides tracking and management of customer services throughout the journey to improve...

Unspecified Vulnerability in Oracle Database Server (CNVD-2018-24127)

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Java VM is one of the Java virtual machine components. A security vulnerability exists in the Java VM...

Unspecified Vulnerability in Oracle GoldenGate (CNVD-2018-24129)

Oracle GoldenGate is the United States Oracle Oracle company for real-time data integration and replication in IT environments, a comprehensive software package, which supports real-time data integration, transactional change data capture, data services, transformation and validation capabilities...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-24266)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Applications Framework OA...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-24267)

Oracle E-Business Suite E-Business Suite is a set of Oracle's fully integrated global business management software.Applications Manager is one of the components used to monitor the performance and availability of Oracle application servers. A security vulnerability exists in the None subcomponent...

Unspecified Vulnerability in Oracle Primavera Unifier (CNVD-2018-24255)

Oracle Construction and Engineering Suite is Oracle's suite of combined management solutions for construction projects, of which Primavera Unifier is a complete project lifecycle management solution component. A security vulnerability exists in the Web Access subcomponent of the Primavera Unifier...

Unspecified Vulnerability in Oracle Java SE, Java SE Embedded and JRockit (CNVD-2019-26739)

Oracle Java SE is a product of Oracle Corporation. Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE Embedded is a Java platform for embedded systems and portable applications...

PT-2018-3211

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67 Description The issue is related to the incorrect implementation of object trimming in V8, which can lead to object corruption. A remote attacker can potentially exploit this via a crafted HTML page...

IBM Security Key Lifecycle Manager Improper Authentication Vulnerability

IBM Security Key Lifecycle Manager centralizes, simplifies and automates the encryption key management process, helping to minimize the risks and operational costs of encryption key management. An improper authentication vulnerability exists in IBM Security Key Lifecycle Manager. An authenticated...

IBM Security Key Lifecycle Manager Access Bypass Vulnerability

IBM Security Key Lifecycle Manager formerly known as Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. An access bypass vulnerability exists...

CVE-2018-1749

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484...

CVE-2018-1749

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484...

Input validation

IBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 148484...

CVE-2018-1749

IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager) is affected by CVE-2018-1749 due to incomplete blacklist-based input validation. Affected versions include IBM Security Key Lifecycle Manager v2.6 (2.6.0.4), v2.7 (2.7.0.3), and v3.0 (3.0.0.1). The root cause is incomplete...