PT-2017-15978

Name of the Vulnerable Software and Affected Versions Java SE versions 6u141, 7u131, and 8u121 Java SE Embedded version 8u121 JRockit version R28.3.13 Description A difficult to exploit vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE allows an unauthenticated...

PT-2017-15973

Name of the Vulnerable Software and Affected Versions Java SE versions 6u141, 7u131, and 8u121 Java SE Embedded version 8u121 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require...

MySQL 5.5.x < 5.5.55 Multiple Vulnerabilities (April 2017 CPU) (Riddle)

The version of MySQL running on the remote host is 5.5.x prior to 5.5.55. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the mysqlprunestmtlist function in client.c that allows an authenticated, remote attacker to cause a denial of service condition...

CVE-2017-3455

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

PT-2017-1956

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.17 and earlier Description The issue is related to insufficient access control in the MySQL Server component of Oracle MySQL, allowing an attacker with network access via multiple protocols to compromise the server...

PT-2017-1968

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.17 and earlier Description The issue is related to insufficient access control in the MySQL Server component of Oracle MySQL. It allows an attacker with network access via multiple protocols to compromise the MySQL...

PT-2017-1969

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.17 and earlier Description The issue is related to inadequate access control in the MySQL Server component, specifically in the InnoDB subcomponent. It allows a high-privileged attacker with network access via multipl...

PT-2017-1958

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.17 and earlier Description The issue is related to inadequate access control in the MySQL Server component of Oracle MySQL, allowing an attacker with network access via multiple protocols to compromise the server...

PT-2017-4204

Name of the Vulnerable Software and Affected Versions Nimbus JOSE+JWT versions prior to 4.39 Description The issue is related to insufficient authentication data verification in the Nimbus JOSE+JWT library. This allows attackers to conduct HMAC bypass attacks by manipulating Additional...

PT-2017-1959 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.54 and earlier MySQL Server versions 5.6.35 and earlier MySQL Server versions 5.7.17 and earlier Description: The issue is related to inadequate access control in the MySQL Server component of Oracle MySQL,...

Information disclosure

An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,...

CVE-2017-0584

An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

PT-2017-1912

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description An information disclosure issue in the Mediaserver's libavc component could allow a local malicious application to access data outside of its permission levels, potentially leading to unauthorized...

PT-2017-1910

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description An information disclosure issue in the libmpeg2 component of the Mediaserver could allow a local malicious application to access data outside of its permission levels, potentially leading to...

HPESBGN03728 rev.1 - HPE Operations Agent using OpenSSL, Remote Denial of Service (DoS), Unauthorized Access to Data

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Operations Agent - v11.15, v11.14 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-2107 |...

go-jose signature obfuscation vulnerability

go-jose is a standard method for implementing JavaScript object signing and encryption . A security vulnerability exists in go-jose. As the program fails to verify the validity of the signature. An attacker could exploit the vulnerability to read unauthorized data...

The vulnerability of the Android operating system, which allows a hacker to gain access to data beyond their authorized levels of permission

The vulnerability of the Mediaserver component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to data beyond their authorized levels of permission...

The vulnerability of the Android operating system, which allows a hacker to gain access to data beyond their authorized levels of permission

The vulnerability of the AOSP Messaging component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to data beyond their authorized levels of permission, using a specially crafted file...

PT-2017-15972

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.34 Oracle VM VirtualBox versions prior to 5.1.16 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

Unauthorized Data Access In Cluster

Apache nifi is vulnerable to unauthorized data accesses. The vulnerability exists in a cluster environment when an anonymous user request is replicated to another node. The replicated node identity will contain the originating node identity instead of the anonymous user's identity...