CVE-2017-3451

CVE-2017-3451 affects Oracle Retail Open Commerce Platform Web subcomponent. Affected are Oracle Retail Open Commerce Platform versions 4.0, 5.0, 5.1, 5.3, 6.0, 6.1, 15.0, and 16.0. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise the platform, w...

CVE-2017-3454

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: InnoDB. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

PT-2017-15938

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise FIN Receivables version 9.2 Description The issue affects the PeopleSoft Enterprise FIN Receivables component, allowing an unauthenticated attacker with network access via HTTP to compromise it. Successful attacks can...

PT-2017-16049

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 11.1.1.7, 11.1.1.9, 12.2.1.0, 12.2.1.1, 12.2.1.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human...

PT-2017-16021

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites, requiring human interaction from a perso...

MySQL Cluster 7.2.x < 7.2.28 DD Subcomponent Arbitrary Data Manipulation (April 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.2.x prior to 7.2.28. It is, therefore, affected by an arbitrary data manipulation vulnerability in the DD subcomponent due to an unspecified flaw. An authenticated, remote attacker can exploit this to update, insert, or delete arbitrary...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-05869)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: DML subcomponent of Oracle MySQL Server 5.7.17 and earlier versions, which can be exploited by an...

MySQL Cluster 7.3.x < 7.3.17 DD Subcomponent Arbitrary Data Manipulation (April 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.3.x prior to 7.3.17. It is, therefore, affected by an arbitrary data manipulation vulnerability in the DD subcomponent due to an unspecified flaw. An authenticated, remote attacker can exploit this to update, insert, or delete arbitrary...

MySQL 5.5.x < 5.5.55 Multiple Vulnerabilities (April 2017 CPU) (Riddle)

The version of MySQL running on the remote host is 5.5.x prior to 5.5.55. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the mysqlprunestmtlist function in client.c that allows an authenticated, remote attacker to cause a denial of service condition...

MySQL Cluster 7.4.x < 7.4.15 DD Subcomponent Arbitrary Data Manipulation (April 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.4.x prior to 7.4.15. It is, therefore, affected by an arbitrary data manipulation vulnerability in the DD subcomponent due to an unspecified flaw. An authenticated, remote attacker can exploit this to update, insert, or delete arbitrary...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-05870)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: DML subcomponent of Oracle MySQL Server 5.7.17 and earlier versions, which can be exploited by an...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-05871)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability in the Server: DML subcomponent of Oracle MySQL Server 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier c...

MySQL Cluster 7.5.x < 7.5.6 DD Subcomponent Arbitrary Data Manipulation (April 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.5.x prior to 7.5.6. It is, therefore, affected by an arbitrary data manipulation vulnerability in the DD subcomponent due to an unspecified flaw. An authenticated, remote attacker can exploit this to update, insert, or delete arbitrary...

Microsoft .NET Framework Remote Code Execution Vulnerability (KB4014982)

This host is missing a critical security update according to Microsoft Security Update KB4014982 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

CVE-2017-0034

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability...

Remote code execution

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

Remote code execution

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

Remote code execution

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

Remote code execution

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

CVE-2017-0035

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...