CVE-2014-2460

CVE-2014-2460 affects Oracle Transportation Management within Oracle Supply Chain Products Suite versions 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3. The vulnerability is described as an unspecified issue that allows remote authenticated users to affect confidentiality via vectors relate...

CVE-2014-2458

CVE-2014-2458 affects the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite (SCP) versions 6.1.0.3 and 6.1.1.3. The vulnerability is described as unspecified and allows remote attackers to compromise integrity via unknown vectors related to an Install issue. The NVD e...

CVE-2014-2458

Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via unknown vectors related to Install...

CVE-2014-2467

CVE-2014-2467 is described as an unspecified vulnerability in the Oracle Agile PLM Framework component of Oracle Supply Chain Products Suite 9.3.3. The connected documents do not provide concrete technical details (affected component/version, root cause, impact or remediation). Monitor for updates.

CVE-2014-2466

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

CVE-2014-2464

Technical details about CVE-2014-2464 are not publicly available in the provided documents. Monitor for updates in the sources you’ve shared; no explicit affected product versions, root cause, impact, or fixes are disclosed here.

CVE-2014-2461

CVE-2014-2461 concerns Oracle Transportation Management within Oracle Supply Chain Products Suite (versions 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3). The vulnerability is described as unspecified and related to Security, with potential confidentiality impact (partial) and remote access vi...

CVE-2014-2457

Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.0 and 6.1.0 allows remote attackers to affect integrity via unknown vectors related to Install...

CVE-2014-2461

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote attackers to affect confidentiality via unknown vectors related to Security...

CVE-2014-2445

The CVE-2014-2445 entry concerns an unspecified vulnerability in the Oracle Agile PLM Framework component of Oracle Supply Chain Products Suite 9.3.3. The impact is limited to integrity and is exploitable by remote authenticated users; vectors are not known, and the exact vulnerability is not det...

CVE-2014-2465

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote attackers to affect integrity via unknown vectors related to Security...

CVE-2014-2466

CVE-2014-2466 concerns the Oracle Agile PLM Framework within Oracle Supply Chain Products Suite 9.3.3. The description states an unspecified vulnerability allowing remote authenticated users to affect confidentiality via unknown vectors. The CVSS2 base score is 2.1 (Low) with partial confidential...

Sally Beauty Supply Acknowledges Breach of 25K

Twelve days after acknowledging that someone attempted to breach its system, Sally Beauty Supply confirmed this week that an attacker was able to penetrate the company and make off with fewer than 25,000 records of its customers’ sensitive banking information. The chain’s parent company Sally...

FrontAccounting 'attachments.php'任意文件上传漏洞

Bugtraq ID:66217 FrontAccounting FA是一个针对企业ERP供应链的网页会计系统。 FrontAccounting /admin/attachments.php脚本存在安全漏洞，允许攻击者上传使用恶意扩展名的文件，并以WEB权限执行。 0 FrontAccounting 2.x FrontAccounting 2.3.20已经修复该漏洞，建议用户下载更新： http://frontaccounting.com...

destoon最新版本储存xss（有条件）

简要描述： 第一弹： 会员中心 供应管理处xss 详细说明： 花了一天时间研究了下destoon的xss问题 好了见正文 1：信息管理处的供应管理点发布 在产品品牌处写入xss测试代码 然后发布 2：来到后台审核供应点 3：审核通过 4：来到供应列表点击修改 见下图，可见产品品牌处的xss代码已经触发 5：成功打到cookie img src="https://images.seebug.org/upload/201403/1019170134779b5304664b0f6f...

CVE-2013-5880

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others...

CVE-2013-5871

Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in Oracle Supply Chain Products Suite 20.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web General, a different vulnerability than CVE-2013-5868 and...

CVE-2013-5795

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to DM Others...

Design/Logic Flaw

Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in Oracle Supply Chain Products Suite 20.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web General, a different vulnerability than CVE-2013-5868 and...

Design/Logic Flaw

Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in Oracle Supply Chain Products Suite 20.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web General, a different vulnerability than CVE-2013-5871 and...