Animated watch faces - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Animated watch faces published at the 'play' market has multiple vulnerabilities...

27 Watch faces for Wear & Sony - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application 27 Watch faces for Wear & Sony published at the 'play' market has multiple vulnerabilities...

Android Wear Faces Creator - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Android Wear Faces Creator published at the 'play' market has multiple vulnerabilities...

ustwo Watch Faces - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application ustwo Watch Faces published at the 'play' market has multiple vulnerabilities...

Tibbo Technology AggreGate Remote Code Execution Vulnerability

Tibbo Technology AggreGate is Tibbo Technology's integrated IoT platform for controlling, configuring, monitoring and servicing different electronic devices through advanced networking technologies. A security vulnerability exists in the Ice Faces servlet in the agserverservice.exe file in the...

Code injection

The Ice Faces servlet in agserverservice.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document...

CVE-2015-7912

The Ice Faces servlet in agserverservice.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document...

CVE-2015-7912

The CVE-2015-7912 entry describes a remote code execution vulnerability in Tibbo AggreGate Platform prior to version 5.30.06. The issue resides in the Ice Faces servlet within ag_server_service.exe of the AggreGate Server Service, allowing an unauthenticated remote attacker to upload and execute ...

Tibbo AggreGate SCADA/HMI Server Service uploadDirectory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tibbo AggreGate SCADA/HMI. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Windows service "AggreGate Server Service" agserverservice.exe. Through...

CVE-2015-4909

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect integrity via vectors related to ADF Faces...

Design/Logic Flaw

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect integrity via vectors related to ADF Faces...

Vulnerability in Oracle Fusion Middleware Oracle Jdeveloper Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Oracle Jdeveloper is one of the free integrated development environment IDE components. A...

Vulnerability in Oracle Fusion Middleware Jdeveloper Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Oracle Jdeveloper is one of the free integrated development environment IDE components. A...

Oracle JDeveloper Multiple Vulnerabilities (October 2015 CPU)

The version of Oracle JDeveloper installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the ADF Faces subcomponent that allows an authenticated, remote attacker to disclose sensitive information...

CVE-2015-4838

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote authenticated users to affect confidentiality via vectors related to ADF Faces...

Design/Logic Flaw

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote authenticated users to affect confidentiality via vectors related to ADF Faces...

CVE-2015-4838

CVE-2015-4838 affects Oracle Fusion Middleware’s JDeveloper component (ADF Faces subcomponent). The vulnerability allows remote access to data confidentiality for authenticated users by exploiting the ADF Faces subcomponent in affected releases: Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, an...

CVE-2015-4909

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect integrity via vectors related to ADF Faces...

CVE-2015-4909

CVE-2015-4909 concerns an unspecified vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware, affecting versions 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0. The issue allows remote attackers to compromise integrity via vectors related to the ADF Faces subcomponent. The NVD entry...

Red Hat JBoss Portal PortletBridge PortletRequestDispatcher Code Injection Vulnerability

Red Hat JBoss Portal is the United States Red Hat Red Hat a set of open source and standards-compliant portal platform , it can build , layout of a portal Web interface for publishing , managing content and customizing the user experience . PortletBridge is a JSR-301 and JSR 329 draft...