OpenJDK: insufficient DSA key parameters checks (Security, 8138593)

It was discovered that the Security component in OpenJDK failed to check the digest algorithm strength when generating DSA signatures. The use of a digest weaker than the key strength could lead to the generation of signatures that were weaker than expected...

The vulnerability of the Oracle Database database management system allows a hacker to modify data.

The vulnerability of the Security component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to data modification, addition, or deletion through network packets...

Oracle Fusion Middleware Oracle BI Publisher Unspecified Vulnerability in BI Publisher Security Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle BI Publisher BI Publisher Security component, which could be exploited by remote attackers to modify data and gain...

Unspecified Vulnerability in Oracle Database Security Component

Oracle Database is a large database of commercial nature. An unspecified security vulnerability exists in the Oracle Database Security component that could be exploited by remote attackers to modify data...

Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC Component Denial of Service Vulnerability (CNVD-2016-00687)

Oracle JD Edwards EnterpriseOne is a fully integrated enterprise resource planning software suite that combines business value, standards-based technology and deep industry experience into a low TCO business solution. An unspecified security vulnerability in the Oracle JD Edwards EnterpriseOne...

Unspecified Vulnerability in Oracle JD Edwards EnterpriseOne Tools Enterprise Infrastructure SEC Component (CNVD-2016-00689)

Oracle JD Edwards EnterpriseOne is a fully integrated enterprise resource planning software suite that combines business value, standards-based technology and deep industry experience into a low TCO business solution. An unspecified security vulnerability exists in the Oracle JD Edwards...

Oracle Supply Chain Agile PLM Security Component Data Modification Vulnerability

Oracle Supply Chain Products Suite is a suite of supply chain solutions that provides value chain planning, value chain execution, and product lifecycle management. An unspecified vulnerability exists in the Oracle Supply Chain Agile PLM Security component, which allows remote attackers to exploi...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Balanced Scorecard Scorecard Security Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle Balanced Scorecard Scorecard Security component of Oracle E-Business Suite, which allows remote attackers to exploit the vulnerability by submitting a special...

Unspecified Vulnerability in Oracle PeopleSoft HCM Global Payroll Switzerland Security Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft HCM Global Payroll Switzerland Security component allows remote attackers to exploit the vulnerability to gain unauthorized access to data, resulting in the...

Design/Logic Flaw

Unspecified vulnerability in the Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect integrity via unknown vectors...

CVE-2016-0467

The connected IBM OpenPages bulletin ties CVE-2016-0467 to an Oracle Database Server Security component vulnerability. It states this unspecified security issue has no confidentiality impact, partial integrity impact, and no availability impact (CVSS Base Score 4, vector AV:N/AC:L/Au:S/C:N/I:P/A:...

CVE-2015-8125

Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the 1 Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or 2...

Cross site request forgery (csrf)

Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the 1 Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or 2...

CVE-2015-8125

Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the 1 Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or 2...

CVE-2015-8125

Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the 1 Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or 2...

CVE-2015-8125: Undefined Security Weakness

Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecified impact via a timing attack involving the 1 Symfony/Component/Security/Http/RememberMe/PersistentTokenBasedRememberMeServices or 2...

CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature

Affected Versions Symfony 2.3.0 to 2.3.34, 2.6.0 - 2.6.11, 2.7.0 - 2.7.6 versions of the Security component are affected by this security issue. This issue has been fixed in Symfony 2.3.35, 2.6.12, and 2.7.7. Note that no fixes are provided for Symfony 2.4 and 2.5 as they are not maintained...

CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service

Affected Versions Symfony 2.3.0 to 2.3.34, 2.6.0 - 2.6.11, 2.7.0 - 2.7.6 versions of the Security component are affected by this security issue. This issue has been fixed in Symfony 2.3.35, 2.6.12, and 2.7.7. Note that no fixes are provided for Symfony 2.4 and 2.5 as they are not maintained...

The vulnerability of the Solaris operating system allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Utility/Security sub-component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, acting locally, to compromise the integrity, accessibility, and confidentiality of information...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server sub-component in the Security section of the MySQL database management system is related to code errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...