One-to-One Fulfillment Print Server Unauthorized Access

The vulnerability of the Print Server component in the business application for managing and distributing information to customers, known as One-to-One Fulfillment, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to ga...

JD Edwards EnterpriseOne Tools Unauthorized Access

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Oracle CRM Technical Foundation Preferences Unauthorized Access

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

BI Publisher Security Unauthorized Access

The vulnerability of the BI Publisher Security component of the BI Publisher reporting tool is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Trade Management UI Unauthorized Access

The vulnerability of the User Interface component of the Trade Management business platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Oracle Marketing User Interface Unauthorized Access

The vulnerability of Oracle Marketing’s User Interface component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Qualcomm Trusted Execution Environment tz_assign() Heap Buffer Overflow DoS

The vulnerability of the tzassign function in the Qualcomm Trusted Execution Environment for Android operating systems arises from an operation that occurs outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, an...

Qualcomm Audio Android Data Compromise

The vulnerability of Qualcomm Audio component in the Android operating system arises from insufficient validation of input data during the playback of WMA files. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Mozilla Firefox Toolbar Unauthorized Access

The vulnerability of Mozilla Firefox’s developer tools is related to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Qualcomm Radio Interface Layer Data Compromise

The vulnerability of the Qualcomm Radio Interface Layer component in the Android operating system is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of protected...

Qualcomm Trusted Execution Environment Android Data Compromise

The vulnerability of Qualcomm Trusted Execution Environment in the Android operating system is related to improper verification of the ECDSA cryptographic signature. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

CVE-2018-5132

The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious WebExtension to search for otherwise protected data if a user has it open. This vulnerability affects Firefox 59...

Qualcomm Android Data Compromise

The vulnerability of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm VT Call Handler Android Data Compromise

The vulnerability of the Qualcomm VT Call Handler component in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information during VT calls...

Qualcomm QTEE API Data Compromise

The vulnerability of the Qualcomm QTEE API in the Android operating system is related to errors in handling array indexes. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm Video Parser Data Compromise

The vulnerability of the Qualcomm Video Parser component in the Android operating system arises due to buffer overflow. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Memory Leak Data Compromise

The vulnerability of the Linux operating system’s kernel fs/userfaultfd.c is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information through the use of the...

UBUNTU-CVE-2018-5132

The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious WebExtension to search for otherwise protected data if a user has it open. This vulnerability affects Firefox 59...

Media Framework Disclosure

The vulnerability of the Media Framework component decoder/impeg2ddechdr.c in the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

libsvn_fs_fs/fs_fs.c Subversion Disclosure DoS

The vulnerability in the libsvnfsfs/fsfs.c component of the Subversion version control system exists due to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to damaged repositories of FSFS FileSystem atop the FileSystem or caus...