PT-2017-3658

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to a component of the Qualcomm Radio Interface Layer in the Android operating system, specifically an error involving the repeated freeing of memory...

The vulnerability of the sixeldecode function (coder/sixel.c) in the console-based graphic editor ImageMagick, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sixeldecode function coder/sixel.c in the console-based image editing tool ImageMagick is related to pointer manipulation errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

CVE-2017-12251

A vulnerability in the web console of the Cisco Cloud Services Platform CSP 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines VMs operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation o...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded Components (CNVD-2017-31310)

Oracle Java SE is short for Java Platform Standard Edition, which is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments.Java SE Embedded is based on Java SE and provides specific features and support for embedded systems. An...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2017-33939)

Java SE is short for Java Platform Standard Edition, for the development and deployment of desktop, server, and embedded devices and real-time environment of Java applications. Java SE Embedded is based on Java SE, and provides specific features and support for embedded systems. A security...

Oracle Mysql Security Updates (oct2017-3236626) 01 - Linux

Oracle MySQL is prone to multiple uspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...

PT-2017-2965

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-0 Q16 Description The issue is related to a NULL Pointer Dereference in the PostscriptDelegateMessage function, located in coders/ps.c. This could potentially allow a remote attacker to impact the confidentiality,...

The vulnerability of the Android operating system from the CAF repository exists due to errors in pointer assignment, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android operating system from the CAF repository is related to errors in pointer assignment at certain times. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2017-10116

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2017-17512)

VirtualBox is cross-platform virtualization software for x86-based systems. A security vulnerability exists in the Core component implementation of Oracle VM VirtualBox versions prior to 5.1.24, which can be exploited by attackers to compromise system confidentiality, integrity, and availability...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2017-17510)

VirtualBox is cross-platform virtualization software for x86-based systems. A security vulnerability exists in the Core component implementation of Oracle VM VirtualBox versions prior to 5.1.24, which can be exploited by attackers to compromise system confidentiality, integrity, and availability...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2017-17505)

VirtualBox is cross-platform virtualization software for x86-based systems. A security vulnerability exists in the Core component implementation of Oracle VM VirtualBox versions prior to 5.1.24, which can be exploited by attackers to compromise the confidentiality, integrity, and availability of ...

Oracle Solaris Local Security Vulnerability (CNVD-2017-06247)

Oracle Sun Solaris is a computer operating system developed by Sun Microsystems. It is a derivative of the UNIX operating system. Oracle Sun Solaris 11.3 has a security vulnerability in its implementation, which can be exploited by a local attacker to compromise system confidentiality, integrity,...

Buffer overflow

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM...

Oracle Berkeley DB Local Vulnerability (CNVD-2017-06544)

Oracle Berkeley DB is the United States Oracle Oracle, an open source embedded database programming library , it can be bound with C, C++, Java, Perl, Python, Tcl and many other languages. data store is one of the data storage components. A security vulnerability exists in the Data Store componen...

CVE-2017-3511

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to th...

Oracle Service Bus Remote Vulnerability

Oracle Service Bus is a service and messaging oriented solution A remote security vulnerability exists in Oracle Service Bus, which can be exploited by remote attackers to compromise system confidentiality, integrity, and availability...

Oracle WebCenter Sites Remote Vulnerability (CNVD-2017-05983)

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebCenter Sites is a Web experience management component. Oracle Fusion Middleware versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 of the...

Oracle Berkeley DB Local Vulnerability

Oracle Berkeley DB is a family of embeddable open source databases. A local security vulnerability exists in the Oracle Berkeley DB DataStore component, which can be exploited by a local attacker to compromise system confidentiality, integrity, and availability...

Oracle WebCenter Sites Remote Vulnerability (CNVD-2017-05986)

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebCenter Sites is a Web experience management component. Oracle Fusion Middleware versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 of the...