Design/Logic Flaw

Vulnerability in the SQLPlus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQLPlus executes to compromise...

CVE-2017-3486

Vulnerability in the SQLPlus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQLPlus executes to compromise...

CVE-2017-3486

Vulnerability in the SQLPlus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQLPlus executes to compromise...

CVE-2017-3486

CVE-2017-3486 affects Oracle Database Server’s SQLPlus component. Affected are 11.2.0.4 and 12.1.0.2. The vulnerability is difficult to exploit but can allow a high-privileged attacker with Local Logon privilege (and user interaction) to compromise SQL Plus, with potential impact on confidentiali...

Code injection

Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates...

CVE-2016-4840

Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates...

CVE-2016-4840

Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates...

CVE-2016-4840

Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates...

CVE-2016-4840

The CVE-2016-4840 issue affects Toshiba Coordinate Plus App for Android and iOS (versions 1.0.2 and earlier). The root cause is that these apps do not verify SSL server certificates, enabling potential Man-in-the-Middle attacks and eavesdropping on encrypted communications. Documented impact is c...

Canal Plus Ahora (C+) - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Canal Plus Ahora C+ published at the 'play' market has multiple vulnerabilities...

AVPlayer Plus - BSD license, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application AVPlayer Plus published at the 'play' market has multiple vulnerabilities...

Oracle Database Server Local Vulnerability (CNVD-2017-06092)

Oracle Database Server is an object-relational database management system. It provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Oracle Database Server SQLPlus component, which can be exploited by remote attackers to compromi...

International Components for Unicode (ICU) for C/C++ Buffer Overflow Vulnerability

International Components for Unicode ICU is the U.S. IBM and other companies to develop a C / C + + and Java programming languages provide a complete set of Unicode data manipulation function library, but also an open-source project to support the internationalization of software. A heap buffer...

Oracle Database Multiple Vulnerabilities (April 2017 CPU)

The remote Oracle Database Server is missing the April 2017 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the SQLPlus component that allows a local attacker to impact confidentiality, integrity, and availability. CVE-2017-3486 ...

NETGEAR ProSAFE Plus Configuration Utility vulnerable to improper access control

Overview ProSAFE Plus Configuration Utility provided by NETGEAR is a Windows application to configure and manage NETGEAR's ProSAFE Plus and Click Switches. An operator uses the utility to login and configure NETGEAR switches. When the utility is invoked, it starts listening on a certain port for...

JVN#08740778: NETGEAR ProSAFE Plus Configuration Utility vulnerable to improper access control

ProSAFE Plus Configuration Utility provided by NETGEAR is a Windows application to configure and manage NETGEAR's ProSAFE Plus and Click Switches. An operator uses the utility to login and configure NETGEAR switches. When the utility is invoked, it starts listening on a certain port for SOAP...

CVE-2016-4889

ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions...

CVE-2016-4890

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...

Design/Logic Flaw

ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions...

Cross site scripting

Cross-site scripting XSS vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...