CVE-2016-0498

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows local users to affect confidentiality via unknown vectors related to Install...

CVE-2016-0497

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Web Client...

CVE-2016-0497

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Web Client...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows local users to affect confidentiality via unknown vectors related to Install...

CVE-2015-4924

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect integrity via vectors related to Security...

Security feature bypass

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect integrity via vectors related to Security...

CVE-2016-0498

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows local users to affect confidentiality via unknown vectors related to Install...

CVE-2016-0498

CVE-2016-0498 concerns the Oracle Agile Engineering Data Management Install component within Oracle Supply Chain Products Suite versions 6.1.2.2, 6.1.3.0, and 6.2.0.0. The vulnerability is described as an unspecified issue allowing confidentiality impact related to the Install process. NVD cites ...

CVE-2016-0540

Affected software: Oracle Supply Chain Products Suite — Configurator UI Servlet component. Vulnerability: an unspecified data access vulnerability allowing remote attackers to obtain sensitive information. Impact: unauthorized disclosure. Notes: connected CNVD entries describe the issue generical...

CVE-2015-4924

The CVE-2015-4924 entry applies to Oracle Supply Chain Products Suite, specifically the Oracle Agile PLM component, version 9.3.1.1/9.3.1.2/9.3.2/9.3.3. Connected sources (CNVD-2016-00559) describe a data-modification vulnerability in the Oracle Supply Chain Agile PLM Security component that allo...

CVE-2016-0541

CVE-2016-0541 affects Oracle Supply Chain Products Suite components: Oracle Configurator UI Servlet, with versions 11.5.10.2, 12.1, and 12.2. The issue is described as a data-access vulnerability that allows remote attackers to access sensitive data, compromising confidentiality via unknown vecto...

CVE-2016-0541

Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 11.5.10.2, 12.1, and 12.2 allows remote attackers to affect confidentiality via unknown vectors related to UI Servlet, a different vulnerability than CVE-2016-0540...

CVE-2015-4924

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect integrity via vectors related to Security...

CVE-2016-0497

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.2.2, 6.1.3.0, and 6.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Web Client...

flipolicesupply.com XSS vulnerability

Vulnerable URL: http://www.flipolicesupply.com/search.html?Search=aids%22%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 360548...

kingdee EAS系统 V7.5 /plt_iservice/service/findFavList.action 远程命令执行漏洞

0x01 框架介绍 全球第一款融合TOGAF标准SOA架构的企业管理软件，金蝶EAS面向亟待跨越 成长鸿沟的大中型企业，以"创造无边界信息流"为产品设计理念， 支持云计算、SOA 和动态流程管理的整合技术平台，全面覆盖企业战略管理、风险管理、集团财务管 理、战略人力资源管理、跨组织供应链、多工厂制造和外部产业链等管理领域，突破 流程制造、项目制造、供应商协作、客户协作等复杂制造和产业链协同应用，实现业 务的全面管理，支持管理创新与发展，帮助企业敏捷应对日益复杂的商业环境变化， 提升整体运作效率，实现效益最大化。 官方主页：www.kingdee.com 0x02 漏洞细节...

Inside the Conficker-Infected Police Body Cameras

Rarely does one story run such a gamut of security threats, encapsulating in this case, Internet of Things risks, supply chain infiltration and some circa-2008 malware for good measure. But that’s what we have with this week’s saga of the body cameras, marketed for police use, that were shipped...

The vulnerability of the Oracle Supply Chain Management system allows a perpetrator to gain unauthorized access and read data.

The vulnerability of the Oracle Configurator component in the Oracle Supply Chain Management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to read data...

The vulnerability of the Oracle Supply Chain Management system allows a perpetrator to modify data.

The vulnerability of the Oracle Agile PLM component of the Oracle Supply Chain Management system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to remotely modify data...

The vulnerability of the Oracle Supply Chain Management system allows a perpetrator to gain unauthorized access and read data.

The vulnerability of the Oracle Agile PLM component in the Oracle Supply Chain Management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to read data...