CVE-2018-2791

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2018-4148

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue concerns binary Calibration files under data/misc/audio, which have 777 permissions. This could potentially allow unauthorized access or modification of these file...

PT-2018-15538

Name of the Vulnerable Software and Affected Versions SAP Cloud Platform version 2.0 Description The issue concerns improper session management in SAP Cloud Platform 2.0, specifically affecting the Connectivity Service and Cloud Connector. This can lead to unauthorized access to or modification o...

UBUNTU-CVE-2016-9575

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary...

HPESBUX03817 rev.2 - HP-UX CIFS Server, Local and Remote Vulnerabilities

Potential Security Impact: Local: Unauthorized Data Access; Remote: Disclosure of Information, Unauthorized Data Access, Unauthorized Modification Of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Common Internet File System CIFS, Client/Server Software...

CloudBees Jenkins Dependency Graph Viewer plugin unauthorized modification vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Dependency Graph Viewer is used in o...

CVE-2018-2713

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware subcomponent: WebCenter Spaces Application. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

PT-2018-15762

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Asset Liability Management versions 6.1.x through 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Asset Liability Management. Successfu...

PT-2018-15721

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Profitability Management versions 6.1.x through 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Profitability Management. Successful...

PT-2018-15765

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Market Risk version 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Market Risk, resulting in unauthorized creation, deletion, or...

PT-2018-15763

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Loan Loss Forecasting and Provisioning version 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Loan Loss Forecasting and Provisioning...

PT-2018-15668

Name of the Vulnerable Software and Affected Versions Primavera Unifier versions 10.x through 17.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks can result in unauthorized creation, deletion, or modification...

Unauthorized Modification

The filebrowser-safe library is vulnerable to unauthorized modification attacks. filebrowser-safe has a directory traversal issue which allows an authenticated administrative level user to rename or delete files under the static directory, above the filebrowser uploads directory. This level of...

HPESBMU03806 rev.2 - HPE IceWall Products, Multiple Remote Unauthorized Disclosure of Information, Unauthorized Modificiation

Potential Security Impact: Remote: Unauthorized Disclosure of Information, Unauthorized Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dfw 10.0 Patch 8 HP-UX and RHEL, 10.0 Patch 10 HP-UX and RHEL and 11.0 RHEL IceWall MCRP 4.0 RHEL 7 IceWall MFA 4.0...

General Motors and Shanghai OnStar iOS Client Unauthorized Modification Vulnerability

General Motors GM and Shanghai OnStar SOS iOS Client is an iOS-based application for making SOS distress calls for drivers in the event of a motor vehicle collision. An unauthorized modification vulnerability exists in the GM and SOS iOS Client version 7.1. An attacker can exploit the vulnerabili...

CVE-2014-8540

The groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to modify ownership of arbitrary groups by leveraging improper permission checks...

F5 Networks BIG-IP : libcurl vulnerability (K10196624)

The libcurl API function called curlmaprintf before version 7.51.0 can be tricked into doing a double-free due to an unsafe sizet multiplication, on systems using 32 bit sizet variables. CVE-2016-8618 Impact A custom monitor or script that calls the curl command may allow unauthorized disclosure ...

CVE-2017-12363

A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on an affected system. The vulnerability is due to insufficient security settings on meetings. An attacker could exploit this vulnerability by modifying the...

PT-2017-14281

Name of the Vulnerable Software and Affected Versions Paessler PRTG Network Monitor version 17.3.33.2830 Description The issue allows a read-only user to create a Map by forging a request and sending it to the server. Recommendations For version 17.3.33.2830, consider restricting access to the ma...

CVE-2017-10392

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...