CVE-2017-3454: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: InnoDB. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

Oracle FLEXCUBE Private Banking Remote Vulnerability

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking and asset management. Oracle FLEXCUBE Investor Servicing is one of the components that provides life-cycle processing of cross-business hedge funds, mutual funds and unit-linke...

Oracle Fusion Middleware Oracle WebCenter Sites Component Remote Vulnerability

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

PT-2017-15973

Name of the Vulnerable Software and Affected Versions Java SE versions 6u141, 7u131, and 8u121 Java SE Embedded version 8u121 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require...

PT-2017-15978

Name of the Vulnerable Software and Affected Versions Java SE versions 6u141, 7u131, and 8u121 Java SE Embedded version 8u121 JRockit version R28.3.13 Description A difficult to exploit vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE allows an unauthenticated...

CVE-2017-3455

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2017-1969

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.17 and earlier Description The issue is related to inadequate access control in the MySQL Server component, specifically in the InnoDB subcomponent. It allows a high-privileged attacker with network access via multipl...

PT-2017-1968

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.17 and earlier Description The issue is related to insufficient access control in the MySQL Server component of Oracle MySQL. It allows an attacker with network access via multiple protocols to compromise the MySQL...

PT-2017-1959 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.54 and earlier MySQL Server versions 5.6.35 and earlier MySQL Server versions 5.7.17 and earlier Description: The issue is related to inadequate access control in the MySQL Server component of Oracle MySQL,...

PT-2017-1912

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description An information disclosure issue in the Mediaserver's libavc component could allow a local malicious application to access data outside of its permission levels, potentially leading to unauthorized...

PT-2017-1910

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description An information disclosure issue in the libmpeg2 component of the Mediaserver could allow a local malicious application to access data outside of its permission levels, potentially leading to...

HPESBGN03728 rev.1 - HPE Operations Agent using OpenSSL, Remote Denial of Service (DoS), Unauthorized Access to Data

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Agent - v11.15, v11.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-2107 |...

PT-2017-15972

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.34 Oracle VM VirtualBox versions prior to 5.1.16 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

The vulnerability of the Android operating system, which allows a hacker to gain access to data beyond their authorized levels of permission

The vulnerability of the Mediaserver component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to data beyond their authorized levels of permission...

The vulnerability of the Android operating system, which allows a hacker to gain access to data beyond their authorized levels of permission

The vulnerability of the AOSP Messaging component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to data beyond their authorized levels of permission, using a specially crafted file...

Unauthorized Data Access In Cluster

Apache nifi is vulnerable to unauthorized data accesses. The vulnerability exists in a cluster environment when an anonymous user request is replicated to another node. The replicated node identity will contain the originating node identity instead of the anonymous user's identity...

Google Android Qualcomm Camera Driver Information Disclosure Vulnerability

Android on Nexus 5X, etc. is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5X, etc. Qualcomm camera driver is a Qualcomm-developed camera driver. Qualcomm camera driver is a camera driver developed by Qualcomm. An information...

Google Android MediaTek Driver Information Disclosure Vulnerability (CNVD-2017-03831)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and MediaTek Driver is a MediaTek driver component used in one of MediaTek's devices. An information disclosure vulnerability exists in Google Android MediaTek Driver. An attacker...

Information disclosure

An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/...

CVE-2017-1150: Improper Privilege Management

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not be permitted to view. IBM Reference : 1999515...