Unspecified Vulnerability in Oracle E-Business Suite Oracle Balanced Scorecard Scorecard Security Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Balanced Scorecard Scorecard Security component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability by submitting a special...

Unspecified Vulnerability in Oracle Database Security Component

Oracle Database is a large database of commercial nature. An unspecified security vulnerability exists in the Oracle Database Security component that could be exploited by remote attackers to modify data...

Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC Component Denial of Service Vulnerability (CNVD-2016-00687)

Oracle JD Edwards EnterpriseOne is a fully integrated enterprise resource planning software suite that combines business value, standards-based technology and deep industry experience into a low TCO business solution. An unspecified security vulnerability in the Oracle JD Edwards EnterpriseOne...

Unspecified Vulnerability in Oracle PeopleSoft HCM Global Payroll Switzerland Security Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft HCM Global Payroll Switzerland Security component allows remote attackers to exploit the vulnerability to gain unauthorized access to data, resulting in the...

Unspecified Vulnerability in Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC Component (CNVD-2016-00689)

Oracle JD Edwards EnterpriseOne is a fully integrated enterprise resource planning software suite that combines business value, standards-based technology and deep industry experience into a low TCO business solution. An unspecified security vulnerability exists in the Oracle JD Edwards...

Oracle Fusion Middleware Oracle BI Publisher Unspecified Vulnerability in BI Publisher Security Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle BI Publisher BI Publisher Security component, which could be exploited by remote attackers to modify data and gain...

Oracle Supply Chain Agile PLM Security Component Data Modification Vulnerability

Oracle Supply Chain Products Suite is a suite of supply chain solutions that provides value chain planning, value chain execution, and product lifecycle management. An unspecified vulnerability exists in the Oracle Supply Chain Agile PLM Security component, which allows remote attackers to exploi...

Design/Logic Flaw

Unspecified vulnerability in the Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors...

CVE-2016-0467

The connected IBM OpenPages bulletin ties CVE-2016-0467 to an Oracle Database Server Security component vulnerability. It states this unspecified security issue has no confidentiality impact, partial integrity impact, and no availability impact (CVSS Base Score 4, vector AV:N/AC:L/Au:S/C:N/I:P/A:...

CVE-2015-8125

Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the 1 Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or 2...

CVE-2015-8125

Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the 1 Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or 2...

Cross site request forgery (csrf)

Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the 1 Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or 2...

CVE-2015-8125

Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the 1 Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or 2...

CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service

Affected Versions Symfony 2.3.0 to 2.3.34, 2.6.0 - 2.6.11, 2.7.0 - 2.7.6 versions of the Security component are affected by this security issue. This issue has been fixed in Symfony 2.3.35, 2.6.12, and 2.7.7. Note that no fixes are provided for Symfony 2.4 and 2.5 as they are not maintained...

CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature

Affected Versions Symfony 2.3.0 to 2.3.34, 2.6.0 - 2.6.11, 2.7.0 - 2.7.6 versions of the Security component are affected by this security issue. This issue has been fixed in Symfony 2.3.35, 2.6.12, and 2.7.7. Note that no fixes are provided for Symfony 2.4 and 2.5 as they are not maintained...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server sub-component in the Security section of the MySQL database management system is related to code errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Solaris operating system allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Utility/Security sub-component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, acting locally, to compromise the integrity, accessibility, and confidentiality of information...

Critical: Red Hat Security Advisory: java-1.7.0-openjdk security update

Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Unspecified Arbitrary Code Execution Vulnerability in Oracle Java SE Security Component

Oracle Java SE is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in the Security subcomponent of Oracle Java SE, which can be exploited by a remote attacker to construct a malicious web page that...

Unspecified Vulnerability in Oracle Java SE 2D Component (CNVD-2015-04848)

Oracle Java SE is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in the Security subcomponent of Oracle Java SE, which can be exploited by a remote attacker to construct a malicious web page and...