CVE-2017-10180

CVE-2017-10180 affects Oracle E-Business Suite CMRO (Oracle CRM Technical Foundation) with affected versions 12.1.3, 12.2.3–12.2.6. The vulnerability is a cross-site scripting (XSS) flaw due to improper validation of user input in CMRO, allowing an unauthenticated, network-accessible attacker to ...

CVE-2017-10143

CVE-2017-10143 concerns Oracle E-Business Suite’s Oracle CRM Technical Foundation (Preferences subcomponent). Affected are EBS versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the CRM Technical Fou...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: Please reference CVE/URL list for details...

Oracle CRM Technical Foundation Remote Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Oracle CRM Technical Foundation ...

Oracle CRM Technical Foundation Remote Vulnerability (CNVD-2017-26283)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Oracle CRM Technical Foundation ...

Oracle CRM Technical Foundation Remote Vulnerability (CNVD-2017-26284)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Oracle CRM Technical Foundation ...

Linux foundation ONOS cross-site scripting vulnerability

Linux foundation ONOS is an open source SDN network operating system maintained by the Linux Foundation and the ONOS community. A cross-site scripting vulnerability exists in device registration in Linux foundation ONOS version 1.9. A remote attacker can exploit this vulnerability to inject...

Linux foundation ONOS Privilege Access Vulnerability

Linux foundation ONOS is an open source SDN network operating system maintained by the Linux Foundation and the ONOS community. A security vulnerability exists in Linux foundation ONOS version 1.9.0. A remote attacker can exploit the vulnerability to execute code...

Linux foundation ONOS privilege access vulnerability (CNVD-2017-19578)

Linux foundation ONOS is an open source SDN network operating system maintained by the Linux Foundation and the ONOS community. A security vulnerability exists in Linux foundation ONOS version 1.9.0. An attacker can exploit the vulnerability to use the websocket protocol without authentication...

Linux foundation ONOS Denial of Service Vulnerability

Linux foundation ONOS is an open source SDN network operating system maintained by the Linux Foundation and the ONOS community. A denial of service vulnerability exists in Linux foundation ONOS version 1.9.0. An attacker could exploit this vulnerability to cause a denial of service...

shaggyfoundation.org XSS vulnerability

Vulnerable URL: http://www.shaggyfoundation.org/gallery.php?id=3%22%3E%3Cb%3E%3Cscript%3Ealert%281%29%3C/script%3E%3C/b%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Koozali Foundation SME Server Open Redirect Vulnerability Vulnerability

Koozali Foundation SME Server is a cross-platform, scalable Linux server from the Koozali Foundation. An open redirection vulnerability exists in the user web login function in Koozali Foundation SME Server versions 8.x, 9.x, and 10.x. The vulnerability can be exploited to gain unauthorized acces...

Design/Logic Flaw

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 and cf-release versions after v244 and prior to v268. A carefully crafted CAPI request from a Space Developer can allow them to gain access to files on the Cloud...

CVE-2017-8033

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior to v268. A filesystem traversal vulnerability exists in the Cloud Controller that allows a space developer to escalate privileges by pushing a...

Design/Logic Flaw

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 only. The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushin...

CVE-2017-8036

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 only. The original fix for CVE-2017-8033 included in CAPI-release 1.33.0 introduces a regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushin...

Apple macOS Sierra Foundation Component Memory Corruption Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.Foundation is one of the components that defines the Objective-C class base layer. A memory corruption vulnerability exists in the Foundation component in Apple macOS Sierra versions prior to 10.12.6. A remo...

CVE-2017-7031

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted file...

CVE-2017-7031

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted file...

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted file...