CVE-2017-3607

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2017-3609

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2017-3614

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2017-3485

CVE-2017-3485 affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected versions: 11.3.0, 11.4.0, 12.0.0–12.0.3, 12.1.0, 12.2.0. Attack via HTTP from a low-privilege user with network access could create/modify/delete data and caus...

CVE-2017-3608

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2017-3622

CVE-2017-3622 originally describes a local privilege-escalation in Solaris CDE (EXTREMEPARR) affecting Solaris 10; the related exploitability details show a directory-traversal in dtappgather that allows a local user to create a user-owned directory and, via loading a shared object, gain root pri...

CVE-2017-3565

CVE-2017-3565 affects Oracle Solaris 11.3, under the RBAC component. The connected sources describe a local, low-privilege vulnerability in Solaris 11.3 that allows an attacker with logon access to compromise Solaris, with attacks requiring user interaction and potentially leading to unauthorized...

CVE-2017-3576

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3563

CVE-2017-3563 affects Oracle VM VirtualBox Core in 5.0.x and 5.1.x before 5.0.38/5.1.20. The root cause is a chain-of-trust DLL loading weakness in VirtualBox process hardening, which can be exploited by abusing COM hijacks to load Microsoft-signed DLLs (via hijacked VirtualBoxClient COM object) ...

CVE-2017-3561

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3590

CVE-2017-3590 affects Oracle MySQL Connector/Python (Connector/Python subcomponent). The vulnerability exists in MySQL Connectors until version 2.1.5 and earlier. It is a local, low-privilege issue (attack vector: local) with no UI interaction required, allowing a low-privileged attacker with log...

CVE-2017-3614

CVE-2017-3614 affects Oracle Berkeley DB Data Store. Affected are Data Store instances using libdb prior to 6.2.32 (e.g., libdb versions such as 5.3.28-6/7); patched versions are available (e.g., 5.3.28-7 and newer 6.2.32+). The vulnerability allows a user with logon to the host running Data Stor...

CVE-2017-3535

CVE-2017-3535 affects the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affected versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to com...

CVE-2017-3493

The CVE covers Oracle FLEXCUBE Enterprise Limits and Collateral Management (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected are versions 12.0.0 and 12.1.0. The vulnerability is exploitable by a low-privileged attacker over HTTP with network access, potentially yie...

CVE-2017-3620

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Reques...

CVE-2017-3589

Removed by vendor...

CVE-2017-3561

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

CVE-2017-3558

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM...

Get a Single View of WAF Events with the Imperva AppSecurity View App for Splunk Enterprise

Enterprises are adopting a hybrid infrastructure model to take advantage of rapid deployment of cloud-based services and higher computing power. A compilation of analyst predictions by SecureWorks, shows that the cloud continues to gain momentum as organizations embrace and benefit from new ways ...

KLA11028 A read/write local files vulnerability in Oracle VM Virtual Box

An unspecified vulnerability was found in Oracle VM VirtualBox. By exploiting this vulnerability low priveleged malicious users with logon to the infrastructure, where OracleVM VirtualBox is executed, can write to some of Oracle VM VirtualBox accessible data and read a subset of Oracle VM...