OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

PT-2018-15836

Name of the Vulnerable Software and Affected Versions Oracle Transportation Management version 6.4.3 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Transportation Management, resulting in unauthorized creation, deletion, or modification...

mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoco...

CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

Code injection

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5786: Undefined Security Weakness

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

PT-2018-8271

Name of the Vulnerable Software and Affected Versions: HPE OfficeConnect Network Switches versions PT.01.03 through PT.01.14 HPE OfficeConnect Network Switches version PT.02.01 Description: A local Unauthorized Data Modification issue exists. Recommendations: For HPE OfficeConnect Network Switche...

CVE-2018-2729

Vulnerability in the Oracle Financial Services Funds Transfer Pricing component of Oracle Financial Services Applications subcomponent: User Interface. Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via...

PT-2018-15705

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 7.3.5.x through 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human...

PT-2017-15198

Name of the Vulnerable Software and Affected Versions Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000 4.47 Description The issue allows authenticated attackers to execute arbitrary SQL commands. This can be done via unspecified vectors, potentially leading to...

PT-2017-11337

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction fro...

PT-2017-15900

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management, requiring human interaction fr...

Oracle Java SE, Java SE Embedded and JRockit Component Unauthorized Operation Vulnerability

Oracle Java SE, Java SE Embedded, and JRockit are products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments; Java SE Embedded is a powerful, reliable, and portable...

CVE-2017-10215

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMDEFNCATG. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10028

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Web Server. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks...

CVE-2017-10120

Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Create Session, Select Any Dictionary privilege with logon to the infrastructure where RDBMS...

PT-2017-11220

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0.0.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized update,...

PT-2017-11046

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications MICROS BellaVita version 2.7.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise MICROS BellaVita. Successful attacks can result in unauthorized update, insert, ...