Portal Component Unauthorized Access

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTT...

Fluid Core Oracle PeopleSoft Enterprise PeopleTools Unauthorized Access

The vulnerability of the Fluid Core component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the...

PIA Core Technology Unauthenticated Access

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data usi...

Oracle PeopleSoft Enterprise PeopleTools Rich Access Control

The vulnerability of the Rich Text Editor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using...

Activity Guide Component Unauthorized Access

The vulnerability of the Activity Guide component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to data using the HTTP...

Web Access Component Unauthorized Access

The vulnerability of the Web Access component of the Oracle Primavera Unifier application, which is used for automating project management processes, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...

Oracle Hyperion Common Events Unauthorized Access

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Oracle Hyperion Common Events Unauthorized Access

The vulnerability of the User Interface component of the Oracle Hyperion Common Events service is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Workflow Component Unauthorized Access

The vulnerability of the Workflow component of the Oracle PeopleSoft Enterprise PeopleTools business application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP...

Oracle Reports Developer Valid Session Access Disclosure

The vulnerability of the “Valid Session” component in the Oracle Reports Developer software relates to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

Guided Self Service component Unauthorized Access

The vulnerability of the Guided Self Service component of the PeopleSoft Enterprise HCM eProfile Manager Desktop software lies in insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP...

Oracle FLEXCUBE Direct Banking Logoff Page Access Disclosure

The vulnerability of the Oracle FLEXCUBE Direct Banking Logoff Page component of the banking analytics system in the Oracle Financial Services Applications is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

Oracle WebLogic Server Access Disclosure

The vulnerability of the WLS component—the Web Services server of Oracle WebLogic Server—is related to insufficient access control. Exploiting this vulnerability could allow an attacker to gain access to protected information using the HTTP protocol...

Oracle E-Business Suite User Management Access Disclosure

The vulnerability of the Oracle User Management component in the Oracle E-Business Suite automation system is related to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information using the HTTP protocol...

Oracle WebLogic Server Access Disclosure

The vulnerability of the WLS component—the Web Services server of Oracle WebLogic Server—is related to insufficient access control. Exploiting this vulnerability could allow an attacker operating remotely to gain access to protected information using the HTTP protocol...

Oracle Enterprise Manager Load Testing XSS

The vulnerability of the Oracle Application Testing Suite’s Load Testing for Web Apps component is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information or cause service failures using the HTTP...

PIA Core Technology Unauthenticated Access

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to data using the HTT...

CVE-2019-7733

In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmove...

rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment...

Support Cart Component Unauthorized Access

The vulnerability of the Support Cart component in the Oracle Applications Manager application management tool, part of the Oracle E-Business Suite, is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...