Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products subcomponent: Usability. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSo...

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component of Oracle PeopleSoft Products subcomponent: Bidder Registration. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2017-3524

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component of Oracle PeopleSoft Products subcomponent: Bidder Registration. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2017-3524

CVE-2017-3524 affects Oracle PeopleSoft Enterprise SCM Strategic Sourcing, subcomponent Bidder Registration, version 9.2. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the SCM Strategic Sourcing data, potentially enabling unauthorized creation, dele...

CVE-2017-3521

Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products subcomponent: Supplier Registration. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2017-3525

Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products subcomponent: Usability. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSo...

CVE-2017-3521

Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products subcomponent: Supplier Registration. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2017-3571

Vulnerability in the PeopleSoft Enterprise SCM eBill Payment component of Oracle PeopleSoft Products subcomponent: Security. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-3522

The CVE-2017-3522 issue affects Oracle PeopleSoft Enterprise SCM eSupplier Connection (Vendor subcomponent) on version 9.2. It is a remote vulnerability exploitable via HTTP that could allow a high-privilege attacker to read, modify, or delete data within the eSupplier Connection, per CVSSv3.0 ba...

CVE-2017-3525

CVE-2017-3525 affects Oracle PeopleSoft Enterprise SCM Service Procurement (subcomponent: Usability) version 9.2. The vulnerability arises in that component, with an attacker able to exploit over a network via HTTP by a high-privilege user to compromise data; impact includes unauthorized creation...

CVE-2017-3521

CVE-2017-3521 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise SCM Purchasing component (Supplier Registration) on version 9.2. The vulnerability is described as exploitable over HTTP by a high-privilege attacker with network access, enabling unauthorized creation, delet...

CVE-2017-3524

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component of Oracle PeopleSoft Products subcomponent: Bidder Registration. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2017-3525: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products subcomponent: Usability. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSo...

Oracle PeopleSoft Enterprise SCM eBill Payment Remote Vulnerability

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise SCM eBill Payment is one of the electronic billing display solution...

CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

Design/Logic Flaw

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

CVE-2016-6299

CVE-2016-6299 affects the scm plug-in in mock, where crafted spec files can bypass the chroot protection and grant the attacker root privileges. This is a local-type vulnerability with high impact (C/H/I/A) per CVSS. Fedora advisories indicate a security fix was released for this CVE; other sourc...

CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

CVE-2016-6299: Undefined Security Weakness

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

CVE-2015-2263: Undefined Security Weakness

Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x before 5.3.3 uses global read permissions for files in its configuration directory when starting YARN NodeManager, which allows local users to obtain sensitive information by reading the files, as...