PT-2015-3107

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.2 Description The issue is related to errors in security settings of the System Integrity Protection feature. It may allow a remote attacker to execute arbitrary code in a privileged context using a specially...

Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression - Configuration Profiles - CoreGraphics - CoreMedi...

Cisco Secure Access Control Server Reflective Cross-Site Scripting Vulnerability

A vulnerability in the Cisco Secure Access Control Server ACS web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a reflective cross-site scripting XSS attack. The vulnerability is due to a lack of input validation on user-supplied...

Cisco Secure Access Control Server Dom-Based Cross-Site Scripting Vulnerability

A vulnerability in the Cisco Secure Access Control Server ACS web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a Document Object Model DOM-based, environment or client side, cross-site scripting XSS attack. The vulnerability is due t...

Unspecified Vulnerability in Oracle Fusion Oracle Endeca Information Discovery Studio Component

Oracle Fusion Middleware is a comprehensive middleware portfolio comprised of Oracle's industry-leading SOA and middleware products.Oracle Endeca Information Discovery is an enterprise data mining platform for advanced, intuitive exploration and analysis of a wide range of data. A security...

Unspecified Vulnerability in Oracle Database RDBMS Partitioning Component

Oracle Database is a large database of commercial nature. A security vulnerability exists in the Oracle Database RDBMS Partitioning component that allows an authenticated user to compromise system integrity, availability, and confidentiality...

Unspecified Vulnerability in Oracle E-Business Oracle Applications Manager Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. A security vulnerability exists in the Oracle Applications Manager component of Oracle E-Business Suite, which can be exploited by remote attackers to compromise system integrity...

Unspecified Vulnerability in Oracle E-Business Oracle Application Object Library Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. A security vulnerability exists in the Oracle E-Business Suite Oracle Application Object Library component that can be exploited by remote attackers to compromise system integrity...

Unspecified Vulnerability in Oracle E-Business Oracle Applications Framework Component (CNVD-2015-04760)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. A security vulnerability exists in the Oracle E-Business Suite Oracle Applications Framework component that can be exploited by remote attackers to compromise system integrity...

Unspecified Vulnerability in Oracle Fusion Oracle Endeca Information Discovery Studio Component (CNVD-2015-04743)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Middleware Oracle Endeca Information Discovery Studio component that can be exploited by remote attackers to compromise system integrity,...

Unspecified Vulnerability in Oracle PeopleSoft PeopleSoft Enterprise PeopleTools Component (CNVD-2015-04721)

Oracle PeopleSoft Enterprise is an enterprise human capital management solution. A security vulnerability exists in the Oracle PeopleSoft Enterprise PeopleSoft Enterprise PeopleTools component that can be exploited by remote attackers to compromise system integrity...

Unspecified Vulnerability in Oracle Fusion Oracle Business Intelligence Enterprise Edition Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Oracle Business Intelligence Enterprise Edition component that can be exploited by remote attackers to compromise system integrity...

Unspecified Vulnerability in Oracle Fusion Oracle GlassFish Server Component (CNVD-2015-04869)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Oracle GlassFish Server component that can be exploited by remote attackers to compromise system integrity...

Unspecified Vulnerability in Oracle Java SE Hotspot Component

Oracle Java SE is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in the Hotspot subcomponent of Oracle Java SE, which can be exploited by a remote attacker to construct a malicious WEB page and...

Unspecified Vulnerability in Oracle Database Core RDBMS Component (CNVD-2015-04811)

Oracle Database is a large database of commercial nature. A security vulnerability exists in the Oracle Database Core RDBMS component that allows an authenticated user to compromise system integrity, availability, and confidentiality...

Unspecified Vulnerability in Oracle Siebel Enterprise Siebel Core - Server OM Svcs Component (CNVD-2015-04726)

Oracle Siebel is a customer relationship management software. A security vulnerability exists in the Oracle Siebel Siebel Core - Server OM Svcs component, which can be exploited by remote attackers to compromise system integrity...

Unspecified Vulnerability in Oracle Siebel Enterprise Siebel UI Framework Component (CNVD-2015-04723)

Oracle Siebel is a customer relationship management software. A security vulnerability exists in the Oracle Siebel Siebel Core - Server OM Svcs component, which can be exploited by remote attackers to compromise system integrity...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Content Management Component

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. A security vulnerability exists in the Enterprise Manager for Oracle Database Content Management component that can be exploited by remote attackers to compromise system integrity...

Unspecified vulnerability in Oracle MySQL Server:Security:Privileges component (CNVD-2015-04715)

Oracle MySQL Server is a relational and popular database. A security vulnerability exists in the Server:Security:Firewall subcomponent of Oracle MySQL Server, which can be exploited by remote attackers to construct a malicious WEB page and trick users into parsing it, which can compromise system...

Unspecified Vulnerability in Oracle Siebel Enterprise Siebel UI Framework Component (CNVD-2015-04724)

Oracle Siebel is a customer relationship management software. A security vulnerability exists in the Oracle Siebel Siebel Core - Server OM Svcs component, which can be exploited by remote attackers to compromise system integrity...