Buffer overflow

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracl...

CVE-2019-2401

CVE-2019-2401 affects Oracle Hospitality Reporting and Analytics in Oracle Food and Beverage Applications (affected version 9.1.0). The vulnerability allows a low-privileged admin with network access via HTTP to compromise data, enabling unauthorized creation, deletion, or modification of critica...

CVE-2019-2407

The CVE-2019-2407 entry pertains to Oracle Hospitality Reporting and Analytics in Oracle Food and Beverage Applications, affected version 9.1.0. The vulnerability is exploitable by a low-privilege attacker with Report privileges who can log on to the infrastructure hosting the component, potentia...

CVE-2019-2401

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...

CVE-2019-2425

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...

CVE-2019-2401

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...

CVE-2019-2425

CVE-2019-2425 affects Oracle Hospitality Reporting and Analytics, a component of Oracle Food and Beverage Applications. Affected product/version: 9.1.0. The vulnerability allows an unauthenticated, network-accessible attacker (HTTP) to compromise data: unauthorized updates/insertions/deletions an...

CVE-2019-2397

CVE-2019-2397 affects the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications, specifically version 9.1.0. The vulnerability, described as easily exploitable, permits a low-privileged attacker with Report privilege to log on to the infrastructure where Or...

CVE-2019-2397

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracl...

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics (CNVD-2019-36664)

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insights into business operations, and improves efficiencies by delivering information to all roles within an organization. An unspecified vulnerabili...

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics (CNVD-2019-36663)

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insights into business operations, and improves efficiencies by delivering information to all roles within an organization. An unspecified vulnerabili...

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics (CNVD-2019-36661)

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insights into business operations, and improves efficiencies by delivering information to all roles within an organization. An unspecified vulnerabili...

Information Disclosure

libreport is vulnerable to information disclosure. Changes made by a user in files that are included in a crash report are discarded when the dump directory's files are reviewed during crash reporting. This allows remote attackers to obtain confidential information such as host names, IP addresse...

CVE-2016-4642

In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This issue was addressed through improved warnings...

CVE-2017-15404

An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to perform privilege escalation via a crafted HTML page...

Privilege escalation

An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to perform privilege escalation via a crafted HTML page...

CVE-2017-15404

CVE-2017-15404 affects Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113. The issue involves processing crash dumps with root privileges and improper symlink handling, enabling local privilege escalation via a crafted HTML page. The Chrome OS update 61.0.3163.113 addresses this...

Microsoft Windows - Windows Error Reporting Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits Microsoft Windows - Windows Error Reporting Local Privilege Escalation Exploit Make sure to copy the file report.wer found in the folder PoC-Files in the same folder as the executable before running it... I guess I could have included it as ...

CVE-2018-1918

IBM Jazz Reporting Service JRS 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IB...

CVE-2018-1918

IBM Jazz Reporting Service (JRS) is affected by CVE-2018-1918 in the Lifecycle Query Engine (LQE) shipped with JRS 6.0.3–6.0.6. The vulnerability is a cross-site scripting flaw in the Web UI that can allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted sessio...