CVE-2008-2616

CVE-2008-2616 affects Oracle PeopleSoft Enterprise PeopleTools (8.48.17, 8.49.11). The connected PeopleSoft/JD Edwards entry shows this vulnerability as network-facing with a valid-session requirement and a CVSSv2 base score of 4.9 (Medium). The impact is not described beyond remote authenticated...

CVE-2008-2618

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2620,...

CVE-2008-2618

CVE-2008-2618 affects Oracle PeopleSoft Enterprise/ JD Edwards JD Edwards PeopleTools: vulnerable component is PeopleSoft PeopleTools, with affected versions 8.48.17 and 8.49.11. The linked risk matrix lists CVSSv2 base score 6.5 (AV:N/AC:L/Au:S/C:P/I:P/A:P). Attack surface noted as HTTP with a v...

CVE-2008-2621

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618,...

CVE-2008-1828

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.19, 8.48.16, and 8.49.09 has unknown impact and remote authenticated attack vectors, aka PSE01...

CVE-2008-1829

Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 has unknown impact and remote attack vectors, aka PSE02...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft HCM ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 and 9.0 has unknown impact and remote attack vectors, aka PSE03...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 has unknown impact and remote attack vectors, aka PSE02...

CVE-2008-1830

Unspecified vulnerability in the PeopleSoft HCM ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 and 9.0 has unknown impact and remote attack vectors, aka PSE03...

Code injection

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.19, 8.48.16, and 8.49.09 has unknown impact and remote authenticated attack vectors, aka PSE01...

CVE-2008-1829

Mode C: The connected sources show concrete remediation details for CVE-2008-1829 in Wireshark. Debian DSA-1942-1 fixes several vulnerabilities in wireshark, including CVE-2008-1829. Specifically, Wireshark 0.99.4-5.etch (Etch) and Wireshark 1.0.2-3+lenny7 (Lenny) are listed as fixes, with older ...

CVE-2008-1828

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.19, 8.48.16, and 8.49.09 has unknown impact and remote authenticated attack vectors, aka PSE01...

CVE-2008-1828

Technical details are not publicly available in the provided documents. No concrete information on affected components, impact, or remediation is given here; monitor for updates from official advisories.

CVE-2008-1829

Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 has unknown impact and remote attack vectors, aka PSE02...

CVE-2008-1830

Unspecified vulnerability in the PeopleSoft HCM ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 and 9.0 has unknown impact and remote attack vectors, aka PSE03...

CVE-2008-1830

Technical details about CVE-2008-1830 are not publicly provided in the supplied documents. No concrete affected products, root cause, impact, or remediation are specified here. Monitor for updates from official sources.

Oracle 2008年1月更新修复多个安全漏洞

BUGTRAQ ID: 27229 Oracle Database是一款商业性质大型数据库系统。 Oracle发布了2008年1月的紧急补丁更新公告，修复了多个Oracle产品中的多个漏洞。这些漏洞影响Oracle产品的所有安全属性，可导致本地和远程的威胁。其中一些漏洞可能需要各种级别的授权，但也有些不需要任何授权。最严重的漏洞可能导致完全入侵数据库系统。目前已知的漏洞包括： xDb.XDBPITRIGPKG.PITRIGDROP、xDb.XDBPITRIGPKG.PITRIGTRUNCATE存储过程中存在SQL注入漏洞，允许远程攻击者通过提交恶意查询请求更改口令，或获取口令哈希。...

Code injection

Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.15 and 8.49.07 has unknown impact and remote attack vectors, aka PSE02...

CVE-2008-0348

Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48.15, and 8.49.07 have unknown impact and remote attack vectors, aka 1 PSE01, 2 PSE03, and 3 PSE04...

Code injection

Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48.15, and 8.49.07 have unknown impact and remote attack vectors, aka 1 PSE01, 2 PSE03, and 3 PSE04...