Rack-Bug - Debugging Toolbar For Rack Applications Implemented As Middleware

Rack::Bug adds a diagnostics toolbar to Rack apps. When enabled, it injects a floating div allowing exploration of logging, database queries, template rendering times, etc. Features Password-based security IP-based security Rack::Bug instrumentation/reporting is broken up into panels. Panels in...

Veris: Missing Server Side Validation of CSRF Middleware Token in Change Password Request

Hello Team, I have found that CSRF Middleware Token is not getting validated at server side in CHANGE PASSWORD request. This request even works without csrfmiddlewaretoken. Steps to Reproduce: 1. Login to your Veris View Account. 2. Go to Settings. 3. Change your password. 4. Submit the form. 5...

The vulnerability of the Oracle Fusion Middleware software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the Oracle Outside In Technology component of the Oracle Fusion Middleware software is caused by buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to cause a service failure using a specially created DOC file...

The vulnerability of the Oracle Fusion Middleware software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the Oracle Outside In Technology component of the Oracle Fusion Middleware software is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to cause a service failure using a specially created WK4 file...

The vulnerability of the Oracle Fusion Middleware software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the Oracle Outside In Technology component of the Oracle Fusion Middleware software is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to cause a service failure using a specially created Paradox DB file...

Digital Paradise Mobile Office Middleware Editor File Upload Vulnerability

Digital Paradise's MKey3G mobile office middleware is an enterprise-oriented application BYOD middleware platform, which has been widely used in energy, finance, government and enterprises. A file upload vulnerability exists in the editor of Digital Paradise's Mobile Office Middleware, which can ...

Digital Paradise Mobile Office Middleware Interface File Traversal Vulnerability

Digital Paradise's MKey3G mobile office middleware is an enterprise-oriented application BYOD middleware platform, which has been widely used in energy, finance, government and enterprises. A file traversal vulnerability in the interface of Digital Paradise's Mobile Office Middleware can be...

Digital Paradise Mobile Office Middleware Editor Directory Traversal Vulnerability

Digital Paradise's MKey3G mobile office middleware is an enterprise-oriented application BYOD middleware platform, which has been widely used in energy, finance, government and enterprises. A directory traversal vulnerability exists in Digital Paradise's Mobile Office Middleware Editor, which can...

Digital Paradise Mobile Office Middleware Interface Changes Arbitrary Administrator Password Vulnerability

Digital Paradise's MKey3G mobile office middleware is an enterprise-oriented application BYOD middleware platform, which has been widely used in energy, finance, government and enterprises. A vulnerability exists in the interface of MKey3G Mobile Office Middleware, which can be exploited by an...

Critical: Red Hat Security Advisory: Red Hat JBoss Operations Network 3.3.5 update

Red Hat JBoss Operations Network 3.3 update 5, which fixes two security issues and several bugs, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives...

Digital Paradise Mobile Office Middleware Interface Arbitrary XML File Read Vulnerability

Digital Paradise's MKey3G mobile office middleware is an enterprise-oriented application BYOD middleware platform, which has been widely used in energy, finance, government and enterprises. There is an arbitrary XML file reading vulnerability in the interface of Digital Paradise's mobile office...

Digital Paradise Mobile Office Middleware Interface Arbitrary File Write Vulnerability

Digital Paradise's MKey3G mobile office middleware is an enterprise-oriented application BYOD middleware platform, which has been widely used in energy, finance, government and enterprises. There is an arbitrary file writing vulnerability in the interface of Digital Paradise's mobile office...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters Component (CNVD-2016-00590)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability in the Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters component could be exploited by an attacker to conduct a denial-of-service attac...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters Component (CNVD-2016-00585)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters component, which could be exploited by remote attackers to conduct...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle BI Publisher Security Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle BI Publisher Security component, which could be exploited by remote attackers to gain access to data...

Unspecified Vulnerability in Oracle Fusion Middleware Web Cache SSL Support Component (CNVD-2016-00579)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Web Cache SSL Support component, which could be exploited by remote attackers to gain access to data...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters Component (CNVD-2016-00587)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability in the Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters component could be exploited by an attacker to conduct a denial of service attac...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Identity Federation Admin Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle Identity Federation Admin component, which could be exploited by remote attackers to modify data...

Unspecified Vulnerability in Oracle Fusion Middleware Web Cache SSL Support Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Web Cache SSL Support component, which could be exploited by remote attackers to gain access to data...

Oracle Fusion Middleware Oracle BI Publisher Unspecified Vulnerability in BI Publisher Security Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle BI Publisher BI Publisher Security component, which could be exploited by remote attackers to modify data and gain...