Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*

It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty"java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol";'. When this system property is set, CXF uses some reflection to try to make the HostnameVerifier work with the old...

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Cruise Shipboard Property Management System

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Cruise Shipboard Property Management System (CNVD-2019-40820)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

GHSA-5Q8M-MQMX-PXP9 Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation

Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited resource allocation. An unauthenticated remote malicious user or attacker can issue requests against Spring Data REST endpoints or endpoint...

GHSA-M929-7FR6-CVJG Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references

Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict extern...

Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references

Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict extern...

GHSA-4FQ3-MR56-CG6R Spring Data Commons remote code injection vulnerability

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted request parameters...

CVE-2018-3181

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC ENOAD. The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2018-3181

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC ENOAD. The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2018-3160

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC Admin, OHC Management. The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged attacker with logon to t...

CVE-2018-3160

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC Admin, OHC Management. The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged attacker with logon to t...

Buffer overflow

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC ENOAD. The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

Buffer overflow

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC Admin, OHC Management. The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged attacker with logon to t...

CVE-2018-3160

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC Admin, OHC Management. The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged attacker with logon to t...

CVE-2018-3160

The CVE-2018-3160 vulnerability affects the Oracle Hospitality Cruise Shipboard Property Management System (Oracle Hospitality Applications), specifically the OHC Admin and OHC Management subcomponents, with affected version 8.0. The issue is described as a high-severity vulnerability (CVSS v3.0 ...

CVE-2018-3160

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC Admin, OHC Management. The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged attacker with logon to t...

CVE-2018-3181

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC ENOAD. The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CVE-2018-3181

CVE-2018-3181 affects Oracle Hospitality Cruises Shipboard Property Management System, subcomponent OHC ENOAD, within Oracle Hospitality Applications, version 8.0. The vulnerability permits a low-privileged user who can log on to the infrastructure running the system to access data beyond intende...

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-23728)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the display property of the CheckBox object in Foxit Reader 9.2.0.929...

Foxit Reader and Foxit PhantomPDF for Windows Remote Code Execution Vulnerability

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A remote code execution vulnerability exists in the handling of the rotate property of TimeField in Foxit Reader 9.2.0.9297 and...