Unspecified Vulnerability in Oracle Customer Interaction History

Oracle E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation.Oracle Customer Interaction History is one of the customer interaction history management components. A security vulnerability exists in the User Interface subcomponent of the Oracle...

CVE-2017-1326

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...

Google Android Bluetooth Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Bluetooth is a component. A power lifting vulnerability exists in the Bluetooth component of Android. An attacker can exploit this vulnerability to gain unauthorized acce...

Oracle Automatic Service Request Unauthorized Access Vulnerability

Oracle Support Tools is a suite of Oracle support tools from Oracle Corporation.Automatic Service Request ASR is a component that provides case generation for specific hardware failures.ASR Manager is a subcomponent that accepts failure data sent by the asset. ASR Manager is a sub-component that...

Unspecified Vulnerability in Oracle Retail Warehouse Management System

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. Oracle Retail Warehouse Management System is one of the retail warehouse management components. A security vulnerability exists in the Security subcomponent of the Oracle Retail...

CVE-2017-5646

Summary: Apache Knox versions 0.2.0–0.11.0 are vulnerable to an impersonation weakness when accessing WebHDFS, allowing an authenticated user to impersonate another user via a specially crafted URL, potentially enabling escalated privileges and unauthorized data access. The activity is audit logg...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-08076)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Oracle PeopleSoft Enterprise SCM Service Procurement Remote Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, of which PeopleSoft Enterprise SCM is a supply chain management component. A remote security vulnerability exists in Oracle PeopleSoft Enterprise SCM Service Procurement. An attacker...

Heap overflow

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file...

Information disclosure

An information disclosure vulnerability in the Qualcomm sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions:...

Oracle MySQL Cluster Denial of Service Vulnerability

Oracle MySQL is an open source relational database management system from Oracle, of which Oracle MySQL Cluster is a highly practical and redundant version for distributed computing environments. A denial of service vulnerability exists in the Cluster:DD subcomponent of the MySQL Cluster componen...

Oracle Java SE 6 < Update 151 / 7 < Update 141 / 8 < Update 131 Multiple Vulnerabilities

Binary data 700090.prm...

MGASA-2017-0135 Updated virtualbox packages fixes security vulnerabilities

This update provides virtualbox 5.1.22 maintenance release and resolves at least the following security issues: A vulnerability in the core subcomponent of virtualbox allows high privilegied attacker unauthorized read access to a subset of VirtualBox accessible data CVE-2017-3513. A vulnerability...

Oracle FLEXCUBE Enterprise Limits and Collateral Management Remote Vulnerability (CNVD-2017-06284)

Oracle Financial Services Applications is Oracle's suite of financial services software that combines core banking, online banking, and property management.Oracle FLEXCUBE Enterprise Limits and Collateral Oracle FLEXCUBE Enterprise Limits and Collateral Management is one of the components used to...

Oracle FLEXCUBE Enterprise Limits and Collateral Management Unauthorized Modification Vulnerability

Oracle Financial Services Applications is Oracle's suite of financial services software that combines core banking, online banking, and property management.Oracle FLEXCUBE Enterprise Limits and Collateral Oracle FLEXCUBE Enterprise Limits and Collateral Management is one of the components used to...

Oracle FLEXCUBE Universal Banking Unauthorized Operation Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle FLEXCUBE Universal Banking is one of the real-time, online coverage of retail, group...Oracle FLEXCUBE Universal Banking is a...

Oracle Primavera P6 Enterprise Project Portfolio Management Unauthorized Operation Vulnerability

Oracle Primavera Products Suite is a suite of project portfolio management solutions from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 EPPM is one of the components used for project planning, management and execution. Primavera P6 Enterprise Project Portfolio...

Oracle Solaris Unauthorized Operation Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the Kernel Zones virtualized NIC driver subcomponent of the Solaris component of Oracle Sun Systems Products Suite,...

Oracle MySQL Server Unauthorized Modification Vulnerability (CNVD-2017-06387)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: Security: Encryption subcomponent of the MySQL Server component in Oracle MySQL, version 5.7.17 a...

Oracle VM VirtualBox Remote Vulnerability (CNVD-2017-06468)

Oracle Virtualization Oracle VirtualBox is a virtual machine component of Oracle's virtualization solution. A security vulnerability exists in the Core subcomponent of the Oracle VM VirtualBox component of Oracle Virtualization. An attacker could exploit this vulnerability to unauthorized creatio...