Oracle Service Contracts Renewals Sub-component Data Modification Privilege

The vulnerability of the Renewals sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data...

BI Publisher Security Sub-component Data Modification

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool formerly XML Publisher is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using...

Oracle WebLogic Server Unauthorized Access

The vulnerability of Oracle WebLogic Server’s application server’s WLS core components is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

Marketing Administration Oracle Marketing E-Business Suite Data Modification

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

Marketing Administration Oracle Marketing E-Business Suite Data Modification

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

Oracle One-to-One Fulfillment Print Server Data Modification

The vulnerability of the Print Server sub-component of the Oracle One-to-One Fulfillment system, a business automation solution from Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

Oracle Applications Framework File Upload Data Manipulation

The vulnerability of the Attachments/File Upload sub-component in Oracle Applications Framework, a system for automating business processes in Oracle E-Business Suite, is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or...

Oracle E-Business Suite User Interface Data Modification

The vulnerability of the User Interface component of the Oracle Trade Management component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data...

Oracle E-Business Suite User Interface Data Modification

The vulnerability of the User Interface component of the Oracle Trade Management component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data...

Enterprise Learning Mgmt sub-component Unauthorized Access

The vulnerability of the Enterprise Learning Mgmt sub-component of the PeopleSoft Enterprise ELM component in the Oracle PeopleSoft Enterprise business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gai...

Palo Alto Networks Expedition Migration Tool Cross-Site Scripting Vulnerability (CNVD-2019-13414)

Palo Alto Networks Expedition Migration Tool is a security policy configuration migration tool from Palo Alto Networks, USA. An HTML injection vulnerability exists in Palo Alto Networks Expedition Migration Tool, which stems from the program's inability to properly filter user-supplied input. A...

Google Chrome Code Execution

The vulnerability of Google Chrome is related to an incorrect optimization assumption in the V8 module. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in a isolated software environment, using a specially created HTML page...

Google Chrome Access Control Error

The vulnerability in Google Chrome relates to access control errors. Exploiting this vulnerability allows a remote attacker to bypass CORS policies for audio content by using a specially created HTML page...

Openwsman Disclosure Protected Information

The vulnerability of the Openwsman package for the Red Hat Enterprise Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information by sending a specially crafted HTTP request remotely...

baigoStudio baigoSSO Code Injection Vulnerability

baigoStudio baigoSSO is a single sign-on system. A security vulnerability exists in baigoStudio baigoSSO v3.0.1. The vulnerability can be exploited by a remote attacker to execute arbitrary PHP code via the site name field in the base configuration...

CVE-2019-7430

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...

PHP Scripts Mall Entrepreneur Job Portal Script HTML Injection Vulnerability

PHP Scripts Mall Entrepreneur Job Portal Script is a PHP script that allows you to create your own job portal. PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 suffers from an HTML injection vulnerability, which can be exploited by an attacker via the search bar to achieve HTML injection...

Blink Rendering DoS

The vulnerability of Google Chrome’s Blink rendering module is related to errors in managing the lifecycle of objects, which can lead to damage to the heap. Exploiting this vulnerability allows a remote attacker to trigger a service failure through a specially created HTML page...

Firefox Thunderbird Memory Access DoS

The vulnerability in web browsers Firefox, Firefox ESR, and the email processing program Thunderbird relates to the release of a static flow analyzer object during use. Exploiting this vulnerability can allow an attacker to cause service interruptions using specially crafted HTML5 content with...

CVE-2019-3919

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usbrestoreForm?script/...