PT-2017-11214

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Materials Control versions 8.31.4 through 8.32.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Materials Control. Successful attacks can result in...

PT-2017-11043

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics versions 8.5.1 and 9.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks can result in...

PT-2017-10968

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human...

PT-2017-11104

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.54 and 8.55 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a...

PT-2017-11123

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PRTL Interaction Hub version 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the PeopleSoft Enterprise PRTL Interaction Hub. Successful attacks require human...

PT-2017-10980

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.0, 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks can result in unauthoriz...

PT-2017-11135

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics versions 8.5.1 and 9.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics, resulting in unauthorized update,...

PT-2017-11209

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Guest Access versions 4.2.0.0 through 4.2.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access, resulting in unauthorized update, insert, or...

PT-2017-11083

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0 through 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking, resulting in unauthorized access to critical...

PT-2017-11206

Name of the Vulnerable Software and Affected Versions Oracle Retail Xstore Point of Service versions 6.0.x through 7.1.x Oracle Retail Xstore Point of Service versions 15.0.x Oracle Retail Xstore Point of Service version 16.0.0 Description The issue allows an unauthenticated attacker with network...

PT-2017-11071

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking...

PT-2017-11216

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Inventory Management versions 8.5.1 and 9.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Inventory Management. Successful attacks can result in...

PT-2017-11165

Name of the Vulnerable Software and Affected Versions Oracle Retail Open Commerce Platform versions 5.0 through 6.1, 15.0, 15.1 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Retail Open Commerce Platform. Successful attacks can resu...

TiMidity++ 'insert_note_steps' Function Denial of Service Vulnerability

TiMidity++ is an open source audio file converter and player that can convert MIDI files to other formats. A security vulnerability exists in the 'insertnotesteps' function of the readmidi.c file in TiMidity++ version 2.14.0. A remote attacker can exploit this vulnerability to cause a denial of...

DEBIAN-CVE-2017-11546

The insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mid file. NOTE: a crash might be relevant when using the --background option...

Fiyo CMS SQL Injection Vulnerability (CNVD-2017-23893)

Fiyo CMS is a content management system CMS for creating CMS templates. A SQL injection vulnerability exists in the /apps/appcomment/controller/insert.php file in Fiyo CMS version 2.0.7. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the help of the 'name'...

Thieves Used Infrared to Pull Data from ATM ‘Insert Skimmers’

A greater number of ATM skimming incidents now involve so-called "insert skimmers," wafer-thin fraud devices made to fit snugly and invisibly inside a cash machine’s card acceptance slot. New evidence suggests that at least some of these insert skimmers -- which record card data and store it on a...

CVE-2017-10759

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpInsertDependencyRecord+0x0000000000000039."...

UBUNTU-CVE-2017-10792

There is a NULL Pointer Dereference in the function llinsert of the libpspp library in GNU PSPP before 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack...

PT-2017-11507

Name of the Vulnerable Software and Affected Versions GNU PSPP versions prior to 0.11.0 Description The issue is related to a NULL Pointer Dereference in the ll insert function of the libpspp library. This can cause a crash when attempting to convert invalid SPSS data into CSV format. A crafted...