PT-2018-17963

Name of the Vulnerable Software and Affected Versions Pelco Sarix Professional versions prior to 3.29.67 Description A XML external entity XXE vulnerability exists in the import.cgi of the web interface component. This issue may allow unauthorized access to sensitive data. Recommendations For...

PT-2018-8355

Name of the Vulnerable Software and Affected Versions Drupal versions 8.4.x before 8.4.5 Description The issue allows users to update certain data without proper permissions, specifically affecting the Settings Tray module. If a Settings Tray form is implemented in a custom or contrib module,...

PT-2018-17580

Name of the Vulnerable Software and Affected Versions Micro Focus Project and Portfolio Management Center version 9.32 Description The issue is related to an XML External Entity XXE vulnerability, which can be exploited to allow XXE. Recommendations For version 9.32, update to a version that...

CVE-2017-5801

A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found...

CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

Code injection

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5786: Undefined Security Weakness

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

PT-2018-8271

Name of the Vulnerable Software and Affected Versions: HPE OfficeConnect Network Switches versions PT.01.03 through PT.01.14 HPE OfficeConnect Network Switches version PT.02.01 Description: A local Unauthorized Data Modification issue exists. Recommendations: For HPE OfficeConnect Network Switche...

PT-2018-5014

Name of the Vulnerable Software and Affected Versions HPE Helion Eucalyptus versions 4.3.0 and earlier Description The issue arises from incorrect permission checks for IAM users accessing versioned objects and ACLs. As a result, authenticated users with S3 permissions may also be able to access...

Oracle E-Business Suite Oracle Marketing is vulnerable (CNVD-2018-03938)

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software, of which Oracle Marketing is a component for managing marketing-related information and processes. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Vulnerability in Oracle E-Business Suite Oracle Marketing

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software, of which Oracle Marketing is a component for managing marketing-related information and processes. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Oracle E-Business Suite Oracle Marketing is vulnerable (CNVD-2018-03936)

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software, of which Oracle Marketing is a component for managing marketing-related information and processes. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Unspecified Vulnerability in Oracle Financial Services Profitability Management Component

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management, of which Oracle Financial Services Profitability Management is a financial services profitability management component. Oracle Financial Services...

Unspecified Vulnerability in Oracle Communications Unified Inventory Management Component (CNVD-2018-01728)

Oracle Communications is a suite of applications from Oracle Corporation for rapidly delivering and monetizing digital life communications.Oracle Communications Unified Inventory Management is one of the unified inventory management components. A security vulnerability exists in the Portal...

Unspecified Vulnerability in Oracle Financial Services Analytical Applications Infrastructure Component

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management.Oracle Financial Services Analytical Applications Oracle Financial Services Analytical Applications Infrastructure is one of the financial services...

Unspecified Vulnerability in Oracle Financial Services Analytical Applications Infrastructure Component (CNVD-2018-01704)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management.Oracle Financial Services Analytical Applications Oracle Financial Services Analytical Applications Infrastructure is one of the financial services...

Unspecified Vulnerability in Oracle Hospitality Cruise Dining Room Management Component

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hotel management from Oracle. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer satisfaction, etc...

Unspecified Vulnerability in Oracle Hyperion Hyperion BI+ Component (CNVD-2018-01531)

Oracle Hyperion is a suite of financial modeling applications from Oracle that provides financial close, reporting, etc. Hyperion BI+ is one of the Business Intelligence platform components that provides management reporting and analysis on any data source. A security vulnerability exists in the...