CVE-2015-4811

CVE-2015-4811 is an Oracle Outside In Technology (OIT) issue in Oracle Fusion Middleware 8.5.0–8.5.2 affecting the Outside In PDF Export SDK. The vulnerability is described as unspecified and allows a local attacker to cause a denial of service via PDF Export SDK, with a CVSS v2 base score of 1.5...

CVE-2015-4832

CVE-2015-4832 describes an unspecified vulnerability in the Oracle Identity Manager (OIM) component of Oracle Fusion Middleware, specifically in the OIM Legacy UI subcomponent. The affected software versions are Oracle Fusion Middleware 11.1.1.7, 11.1.2.2, and 11.1.2.3. The vulnerability is state...

CVE-2015-4799

Technical details about CVE-2015-4799 are not publicly provided in the supplied documents. No affected products, root cause, or remediation details are specified. Monitor for updates from Oracle and security feeds.

October 2015 Oracle Critical Patch Update

Oracle on Tuesday patched 154 vulnerabilities in 54 different products as part of its regularly scheduled Critical Patch Update. More than half of the patches, 84 to be exact, address vulnerabilities that Oracle claims may be remotely exploitable without authentication. Java SE is responsible for...

methodOverride Middleware Reflected Cross-Site Scripting

Overview Connect is a stack of middleware that is executed in order in each request. The "methodOverride" middleware allows the http post to override the method of the request with the value of the "method" post key or with the header "x-http-method-override". Because the user post input was not...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.4 update

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.4 and fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. Common...

Moderate: Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform 7 director update

Updated packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 7.0 director for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common...

openstack-tripleo-heat-templates: unsafe pipeline ordering of swift staticweb middleware

A flaw was discovered in the pipeline ordering of OpenStack Object Storage's staticweb middleware in the swiftproxy configuration generated from the openstack-tripleo-heat-templates package OpenStack director. The staticweb middleware was incorrectly configured before the Identity Service, and...

Django logout function Denial-of-service

Security releases issued: 1.8.4, 1.7.10, 1.4.22CVE: 2015-5963Fix: Update/1.8.4/1.7.10/1.4.22/Add @loginrequiredDjango 官方在八月十八号发布多个版本更新，修复几个安全问题，其中便包括一个由编码不当导致的 DoS 漏洞，测试一些网站均存在此问题。Detaildjango.contrib.auth.views.logout 视图用于开发者实现用户注销退出功能，正常情况下对于 logout 视图应使用官方提供的...

The vulnerability of the Django web application framework, which allows a hacker to trigger a denial-of-service attack

The vulnerability of the contrib.sessions.middleware.SessionMiddleware component in the Django web framework is related to a resource management error. Exploiting this vulnerability allows an attacker to cause service failures by sending a large number of requests to contrib.auth.views.logout,...

The vulnerability of the Oracle E-Business Suite and the Oracle Fusion Middleware software platform, which allows a perpetrator to compromise the confidentiality and integrity of information.

The vulnerability of the sub-component Oracle WebCenter Portal in the Oracle E-Business Suite enterprise activity automation system and the Oracle Fusion Middleware software platform is related to code errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Data Integrator sub-component of the Oracle Fusion Middleware software exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to influence the integrity of information.

The vulnerability of the Oracle Business Intelligence Enterprise Edition mobile app software platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of information...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component of the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability may allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Data Integrator sub-component of the Oracle Fusion Middleware software exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component of the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability may allow an attacker, operating remotely, to compromise the integrity, accessibility, and confidentiality of...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component of the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability may allow an attacker, operating remotely, to compromise the integrity, accessibility, and confidentiality of...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component within the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity, accessibility, and confidentiality o...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Data Integrator component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity, availability, and confidentiality of information...

The vulnerability of the Oracle Fusion Middleware software platform, which allows a perpetrator to compromise the integrity of information

The vulnerability of the Oracle GlassFish Server and Oracle WebLogic Server components of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of information remotely...