5034 matches found
Design/Logic Flaw
Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data via a crafted app...
OpenAFS Multiple Vulnerabilities - 01 - Windows
OpenAFS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openafs:openafs"; ifdescription...
Low: Red Hat Security Advisory: openstack-glance security update
Updated openstack-glance packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Product Security has rated this update as having a Low security impact. Common Vulnerability Scoring System CVSS base scores, which give...
Unspecified Vulnerability in Oracle PeopleSoft SCM Order Management Security Component
Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft SCM Order Management Security component allows remote attackers to exploit the vulnerability to make unauthorized changes to data...
Unspecified Vulnerability in Solaris Libc Library Component
Solaris is a unix-based operating system. An unspecified vulnerability in the Solaris Libc Library component could allow an attacker to launch a denial-of-service attack or unauthorized modification of some data...
Unspecified Vulnerability in Oracle WebLogic WLS Core Component
Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the WLS Core component of Oracle WebLogic allows remote attackers to exploit the vulnerability to gain unauthorized access to data, modify it, an...
Unspecified Vulnerability in Oracle WebLogic WLS-Console Component
Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the Oracle WebLogic WLS-Console component allows remote attackers to exploit the vulnerability to make unauthorized changes to data...
Unspecified Vulnerability in Oracle WebLogic WLS Core Component (CNVD-2016-00564)
Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the WLS Core component inside Oracle WebLogic allows remote attackers to conduct denial-of-service attacks by exploiting the vulnerability to gai...
Unspecified Vulnerability in Oracle PeopleSoft PeopleTools Fluid Core Component
Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft PeopleTools Fluid Corek component allows remote attackers to exploit the vulnerability to make unauthorized changes to data...
Unspecified Vulnerability in Oracle PeopleSoft HCM Global Payroll Switzerland Security Component
Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft HCM Global Payroll Switzerland Security component allows remote attackers to exploit the vulnerability to gain unauthorized access to data, resulting in the...
The vulnerability of the Oracle Fusion Middleware software allows a perpetrator to gain unauthorized access to read data.
The vulnerability of the Oracle HTTP Server component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to read data...
The vulnerability of the Oracle Supply Chain Management system allows a perpetrator to gain unauthorized access and read data.
The vulnerability of the Oracle Agile PLM component in the Oracle Supply Chain Management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to read data...
The vulnerability of the Oracle Fusion Middleware software allows a perpetrator to gain unauthorized access to read data.
The vulnerability of the Oracle GlassFish Server software component of the Oracle Fusion Middleware framework is related to errors in the code. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to read data...
The vulnerability of the Oracle E-Business Suite system’s automation activities allows a perpetrator to gain unauthorized access to read data.
The vulnerability of the Oracle Applications component in Oracle E-Business Suite systems, which is part of the enterprise automation system, is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read data...
CVE-2015-6303
CVE-2015-6303 concerns the Cisco Spark mobile app (2015-07-04 build) where SSL/TLS certificate validation is flawed. The root cause is improper verification of X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and access sensitive information via a crafte...
Symantec Ghost Out-of-Bounds Indexing Remote Code Execution Vulnerability
Symantec Ghost Explorer Utility is GHO file browsing tool. Symantec Ghost has an out-of-bounds indexing remote code execution vulnerability that can be exploited by an attacker to cause a denial of service or access unauthorized data...
Symantec Endpoint Protection Manager and Client Issues
SUMMARY Symantec Endpoint Protection SEP 12.1.6 addresses vulnerabilities that were found in prior releases. These include an authorized but less-privileged administrator able to attempt a blind SQL injection in the SEP Manager SEPM console through PHP prepared statements; a local Denial of Servi...
Multiple Vulnerabilities in Cisco Unified Communications Manager
Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A cross-site scripting and cross-site request forgery vulnerability exists in Cisco Unified Communications Manager. An unauthenticated, remote attacker could use this vulnerability to execute...
ReviewPost 2.84 - Multiple Vulnerabilities
ReviewPost 2.84 - Multiple Vulnerabilities ReviewPost Multiple Vulnerabilities Vendor: All Enthusiast, Inc. Product: ReviewPost Version: = 2.84 Website: http://www.reviewpost.com/ BID: 12159 CVE: CVE-2005-0270 CVE-2005-0271 CVE-2005-0272 OSVDB: 12703 12704 12705 12706 12707 12708 SECUNIA: 13697...
