CVE-2017-10175: Undefined Security Weakness

Vulnerability in the Oracle iSupport component of Oracle E-Business Suite subcomponent: Profiles. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2017-11184

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue affects the Oracle iStore component, specifically the Shopping Cart subcomponent. It allows an unauthenticated attacker with network...

PT-2017-11236

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6 Description The issue affects the Oracle Application Object Library component, specifically the Attachments subcomponent. It allows an unauthenticated attacker with...

CVE-2017-10218: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications subcomponent: Base. Supported versions that are affected are 4.2.0.0 and 4.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2017-11197

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Simphony version 2.9 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony, resulting in unauthorized read access to a subset of accessible data...

CVE-2017-10208: Undefined Security Weakness

Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications subcomponent: Other. The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via SMTP to compromise Oracle Hospitality e7. Successfu...

CVE-2017-6866

A vulnerability was discovered in Siemens XHQ server 4 and 5 4 before V4.7.1.3 and 5 before V5.0.0.2 that could allow an authenticated low-privileged remote user to gain read access to data in the XHQ solution exceeding his configured permission level...

CVE-2017-11437

GitLab Enterprise Edition EE before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users...

Debian Security Bypass Vulnerability

Debian is a free operating system created by the Debian Project Collaboration with Linux or FreeBSD as its kernel. A security bypass vulnerability exists in Debian. An attacker could use this issue to bypass certain security restrictions and gain read access to sensitive information...

Oracle iStore Remote Vulnerability (CNVD-2017-27301)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Oracle iStore is one of the ability to allow merchant...

Oracle iStore Remote Vulnerability (CNVD-2017-27300)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Oracle iStore is one of the ability to allow merchant...

Design/Logic Flaw

Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service application crash via a malformed PRE file, related to a "Read Access Violation starting at reporter!madTraceProcess."...

CVE-2017-11674

Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service application crash via a malformed PRE file, related to a "Read Access Violation starting at reporter!madTraceProcess."...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise FSCM (CNVD-2017-20277)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise FSCM is one of the financial and supply chain management components. A...

CVE-2017-11674: Improper Restriction of Operations within the Bounds of a Memory Buffer

Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service application crash via a malformed PRE file, related to a "Read Access Violation starting at reporter!madTraceProcess."...

OpenJDK: incorrect key size constraint check (Security, 8179101)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

OpenJDK: incorrect key size constraint check (Security, 8179101)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

PT-2017-11201

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.1.24 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in...

PT-2017-11185

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, 8u131 Java SE Embedded version 8u131 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require huma...

PT-2017-11235

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, and 8u131 Java SE Embedded version 8u131 JRockit version R28.3.14 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded,...