Unspecified Vulnerability in Oracle E-Business Suite Oracle Interaction Blending Blending Administration Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Interaction Blending Blending Administration component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability to submit special...

Unspecified Vulnerability in Oracle Database Security Component

Oracle Database is a large database of commercial nature. An unspecified security vulnerability exists in the Oracle Database Security component that could be exploited by remote attackers to modify data...

Oracle Database XDB - Unspecified Vulnerability in XML Database Component

Oracle Database is a large database of commercial nature. An unspecified security vulnerability exists in the Oracle Database XDB - XML Database component that could be exploited by remote attackers to modify data, access data, and conduct denial-of-service attacks...

Unspecified Vulnerability in Oracle E-Business Suite Application Mgmt Pack for E-Business Suite REST Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Application Mgmt Pack for E-Business Suite REST component, which allows remote attackers to exploit the vulnerability by submitting special...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Marketing Marketing Administration Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Marketing Marketing Administration component, which allows remote attackers to exploit the vulnerability to submit a special request to...

Unspecified Vulnerability in Oracle Database Database Vault Component

Oracle Database is a large database of commercial nature. An unspecified security vulnerability exists in the Oracle Database Database Vault component, which could be exploited by remote attackers to modify data...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Customer Interaction History User GUI Component (CNVD-2016-00617)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Customer Interaction History User GUI component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability by submitting special...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Human Resources General utilities Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Human Resources General utilities component, which allows remote attackers to exploit the vulnerability to submit special requests to...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Learning Management OTA Self Service Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Learning Management OTA Self Service component, which could be exploited by a remote attacker to submit a special request to modify data...

Code injection

The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.1 FP1 for SmartCloud Control Desk allows remote authenticated users to bypass intended access restrictions, and obtain...

Design/Logic Flaw

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2015-1836

Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a denial of service daemon outage, obtai...

Microsoft Windows Graphics Memory Corruption Vulnerability (CNVD-2015-08116)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory corruption vulnerability exists in the Windows font library of Microsoft Windows. The vulnerability exists because the program does not properly handle specially designed embedded fonts. A remo...

Microsoft Windows Graphics Memory Corruption Vulnerability (CNVD-2015-08114)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory corruption vulnerability exists in the Windows font library of Microsoft Windows. The vulnerability exists because the program does not properly handle specially designed embedded fonts. A remo...

Vulnerability of the Java Platform software platform, allowing attackers to modify data

The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through the use of the Java Web Start application or Java applet...

PT-2015-2485

Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite version 9.3.4 Description The issue is related to an unspecified vulnerability in the Oracle Agile PLM component, which allows remote authenticated users to affect data integrity. This is due to errors in the...

PT-2015-2562

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.3 Description The issue is related to errors in the code of the Oracle Agile PLM component in Oracle Supply Chain Products Suite. It may allow a remote attacker to modify data, potentially affecting the integrity o...

PT-2015-2506

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 10.1.3.5.1 Description The issue is related to errors in the code of the Oracle WebCenter Content component in Oracle Fusion Middleware, allowing remote attackers to affect data integrity. The exploitation of...

PT-2015-2575

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.0.1 through 12.2.2 Description The issue is related to an unspecified vulnerability in the Enterprise Manager Ops Center component, allowing remote authenticated users to affect...

MATCHA INVOICE vulnerable to SQL injection

Overview MATCHA INVOICE provided by ICZ Corporation is a web-based billing management software. MATCHA INVOICE contains multiple SQL injection CWE-89 vulnerabilities. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...