5070 matches found
PT-2018-2406
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle CRM Technical Foundation component. It can be exploited by a remote attacker ...
Design/Logic Flaw
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, userspace can read values from audio codec registers...
UBUNTU-CVE-2017-15850
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, userspace can read values from audio codec registers...
Design/Logic Flaw
When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries containing a region name as a bind parameter that allow read access to objects within unauthorized regions...
CVE-2017-9796
When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries containing a region name as a bind parameter that allow read access to objects within unauthorized regions...
PT-2018-8535
Name of the Vulnerable Software and Affected Versions Apache Geode versions prior to 1.3.0 Description The issue allows a user with read access to specific regions within a Geode cluster to execute OQL queries, enabling read and write access to objects within unauthorized regions. Furthermore, a...
PT-2018-8536
Name of the Vulnerable Software and Affected Versions Apache Geode versions prior to 1.3.0 Description The issue allows a user with read access to specific regions within a Geode cluster to execute OQL queries containing a region name as a bind parameter, potentially granting read access to objec...
CVE-2017-9796: Exposure of Sensitive Information to an Unauthorized Actor
When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries containing a region name as a bind parameter that allow read access to objects within unauthorized regions...
CVE-2017-14101
A security researcher found an XML External Entity XXE vulnerability on the Conserus Image Repository archive solution version 2.1.1.105 by McKesson Medical Imaging Company, which is now a Change Healthcare company. An unauthenticated user supplying a modified HTTP SOAP request to the vulnerable...
Xxe
A security researcher found an XML External Entity XXE vulnerability on the Conserus Image Repository archive solution version 2.1.1.105 by McKesson Medical Imaging Company, which is now a Change Healthcare company. An unauthenticated user supplying a modified HTTP SOAP request to the vulnerable...
CVE-2017-14101
A security researcher found an XML External Entity XXE vulnerability on the Conserus Image Repository archive solution version 2.1.1.105 by McKesson Medical Imaging Company, which is now a Change Healthcare company. An unauthenticated user supplying a modified HTTP SOAP request to the vulnerable...
CVE-2017-14101
A security researcher found an XML External Entity XXE vulnerability on the Conserus Image Repository archive solution version 2.1.1.105 by McKesson Medical Imaging Company, which is now a Change Healthcare company. An unauthenticated user supplying a modified HTTP SOAP request to the vulnerable...
CVE-2017-14101
Affected product/brand: Change Healthcare Conserus Image Repository archive solution (version 2.1.1.105). Vulnerability type: XML External Entity (XXE) injection. Root cause / vector: Unauthenticated user can send a modified HTTP SOAP request to the vulnerable service to trigger XXE behavior. Imp...
PT-2017-3893
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.2.0.1, 18c, and 19c Description The issue is related to a vulnerability in the Core RDBMS component of Oracle Database Server, which can be easily exploited by a low-privileged attacker with Create Session...
Unspecified Vulnerability in Oracle Fusion Middleware Oracle Tuxedo Component
Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other capabilities.Oracle Tuxedo is one of the components used to develop, deploy, and manage...
PT-2017-11257
Name of the Vulnerable Software and Affected Versions Oracle Tuxedo versions 11.1.1, 12.1.1, 12.1.3, 12.2.2 Description The issue allows an unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo, resulting in unauthorized read access to a subset of Oracle Tuxedo...
CVE-2017-10266: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...
Integer overflow
archival/libarchive/decompressunlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation...