10504 matches found
The vulnerability of the Administration component of the Oracle Marketing Encyclopedia System, a business automation system of Oracle E-Business Suite, allows an attacker to access, modify, add, or delete data, or to gain unauthorized access to protected information.
The vulnerability of the Administration component of the Oracle Marketing Encyclopedia System, a business automation system within the Oracle E-Business Suite, is related to inadequate access control mechanisms. Exploiting this vulnerability could allow an attacker to remotely gain access to...
The vulnerability of the Email Address list and Message Display components of the Oracle Email Center software, a business automation system within the Oracle E-Business Suite. This allows attackers to access, modify, add, or delete data, or gain unauthorized access to protected information.
The vulnerability of the Email Address list and Message Display components of the Oracle Email Center software, a messaging automation system within the Oracle E-Business Suite, is related to lack of access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete...
The vulnerability of the Workflow Notification Mailer component of the Oracle Workflow software, a system for automating business processes within the Oracle E-Business Suite. This component allows an intruder to access, modify, add, or delete data.
The vulnerability of the Workflow Notification Mailer component of the Oracle Workflow software in the Oracle E-Business Suite relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...
The vulnerability of the Project Manager component of the Oracle Primavera P6 Enterprise Project Portfolio Management application allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the Project Manager component of the Oracle Primavera P6 Enterprise Project Portfolio Management application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...
The vulnerability of the Project Manager component of the Oracle Primavera P6 Enterprise Project Portfolio Management application allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the Project Manager component of the Oracle Primavera P6 Enterprise Project Portfolio Management application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...
The vulnerability of the Absence Recording component in the Oracle Human Resources HR management software allows a violator to gain access to modify, add, or delete data.
The vulnerability of the Absence Recording component in the Oracle Human Resources HR management software is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...
unbound: command injection with data coming from a specially crafted IPSECKEY answer
A shell command injection vulnerability was discovered in the way unbound handles DNS queries for systems with a public key used for IPsec. When ipsecmod is enabled, a malicious DNS server could send a DNS reply which would be used during a following DNS query to execute shell commands with the...
Cybozu Garoon License Issue Vulnerability (CNVD-2020-26659)
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon versions 4.0.0 to 4.10.3. A remote attacker can...
OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network acce...
Unspecified Vulnerability in Oracle Java SE (CNVD-2020-72710)
Oracle Java SE is a U.S. Oracle Oracle for the development and deployment of desktop, server and embedded devices and real-time environments in Java applications. A security vulnerability exists in the JSSE component in Oracle Java SE versions 11.0.6 and 14. An attacker could exploit the...
Oracle E-Business Suite Email Center Unauthorized Operation Vulnerability (CNVD-2020-23751)
Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Email Center is one of the e-mail component. A securi...
Unspecified Vulnerability in Oracle MySQL Connectors
Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Connectors is one of the drivers for connecting applications that use MySQL. A security vulnerability exists in the MySQL Connectors 8.0.14 and earlier and Connector/J component of Oracle MySQL 5.1....
Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Absence Management
Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Oracle. The product provides human capital management, financial management, supplier relationship management and other functions. An unspecified vulnerability exists in Oracle PeopleSoft Products...
Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Liquidity Risk Measurement and Management
Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Liquidity Risk Measurement...
Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Loan Loss Forecasting and Provisioning
Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Loan Loss Forecasting and...
Unspecified Vulnerability in Oracle Financial Services Applications Insurance Accounting Analyzer
Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Insurance Accounting Analyzer, which can be...
Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Balance Sheet Planning
Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Balance Sheet Planning, whi...
Microsoft Windows Media Foundation Buffer Overflow Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Media Foundation is one of the multimedia application libraries. A buffer overflow...
Microsoft Windows Media Foundation Buffer Overflow Vulnerability (CNVD-2020-26242)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Media Foundation is one of the multimedia application libraries. A buffer overflow...
Oracle Financial Services Applications FLEXCUBE Core Banking Unauthorized Operation Vulnerability
Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. A security vulnerability exists in the Transaction Processing component of FLEXCUBE Core Banking version 4.0 in Oracle...