Design/Logic Flaw

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: Preferences. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2017-10387

CVE-2017-10387 affects Oracle E-Business Suite, specifically the Oracle CRM Technical Foundation (Preferences) in versions 12.1.3, 12.2.3–12.2.7. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise data integrity, with successful attacks potentially en...

CVE-2017-10387

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: Preferences. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

The Document Foundation LibreOffice RTF Stylesheet Code Execution Vulnerability(CVE-2016-4324)

SUMMARY An exploitable Use After Free vulnerability exists in the RTF parser LibreOffice. A specially crafted file can cause a use after free resulting in a possible arbitrary code execution. To exploit the vulnerability a malicious file needs to be opened by the user via vulnerable application...

turkishculturalfoundation.org XSS vulnerability

Vulnerable URL: http://www.turkishculturalfoundation.org/search.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2960287 VIP website status:| No Coordinated Disclosure Timeline:...

Oracle CRM Technical Foundation Unauthorized Operation Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Oracle CRM Technical Foundation ...

wylandfoundation.org XSS vulnerability

Open Bug Bounty ID: OBB-339414 Description| Value ---|--- Affected Website:| wylandfoundation.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

search.foundationcenter.org XSS vulnerability

Vulnerable URL: http://search.foundationcenter.org///search/%3C%2Fscript%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%2FXSSPOSED%2F%3E/3 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

IBM Insights Foundation for Energy SQL Injection Vulnerability

IBM Insights Foundation for Energy is a suite of energy analytics, data management and visualization solutions from IBM in the United States. A SQL injection vulnerability exists in IBM Insights Foundation for Energy version 2.0. A remote attacker can exploit the vulnerability by sending speciall...

IBM Insights Foundation for Energy Cross-Site Scripting Vulnerability

IBM Insights Foundation for Energy is a suite of energy analytics, data management and visualization solutions from IBM in the United States. A cross-site scripting vulnerability exists in IBM Insights Foundation for Energy version 2.0. A remote attacker can exploit this vulnerability to inject...

Security Update for Microsoft SharePoint Foundation 2013 (KB4011180) farm-deployment

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Foundation 2013 (KB4011180)

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Foundation 2013: October 10, 2017

Description of the security update for SharePoint Foundation 2013: October 10, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

HP UCMDB Foundation Software Cross-Site Scripting Vulnerability

HP UCMDB Foundation Software is able to provide users with bottom-up capabilities that include four parts: infrastructure auto-discovery, data modeling, service mapping definition and service impact analysis. A cross-site scripting vulnerability exists in HP UCMDB Foundation Software, which could...

HP UCMDB Foundation Software Remote Code Execution Vulnerability

HP UCMDB Foundation Software is able to provide users with bottom-up including infrastructure auto-discovery, data modeling, service mapping definition and service impact analysis of four parts of the function. A security vulnerability exists in HP UCMDB Foundation Software that could be exploite...

khalifafoundation.ae XSS vulnerability

Vulnerable URL: http://www.khalifafoundation.ae/new/index.php?module=news=2=278=350=13'"61 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1865497 VIP website status:| No Coordinated Disclosure Timeline:...

CVE-2017-14353

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution...

CVE-2017-14353

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution...

Cross site scripting

A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting...

CVE-2017-14354

A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting...