CVE-2018-1000132

Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1...

CVE-2018-1000132

CVE-2018-1000132 affects Mercurial 4.5 and earlier, with an Incorrect Access Control (CWE-285) in the Protocol server that can lead to unauthorized data access over the network. The vulnerability is explicitly stated to have been fixed in Mercurial 4.5.1. Connected advisories reference affected p...

CVE-2018-1000132

Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1...

CVE-2018-1000132

Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1...

CVE-2018-1000132

Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1...

CVE-2018-1000132

Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1...

FineCMS v5.2.0 SQL注入

在/finecms/dayrui/controllers/Api.php第45行： template-cron = 0; $GET'page' = max1, int$this-input-get'page'; $params = drstring2arrayurldecode$this-input-get'params'; $params'get' = @jsondecodeurldecode$this-input-get'get', TRUE; $this-template-assign$params; $name = strreplacearray'\', '/', '..',...

Solaris 10 (sparc) : 150157-01

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Remote Procedure Call RPC. Supported versions that are affected are 8, 9, 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can...

CVE-2017-5801

A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found...

Oracle E-Business Suite Oracle Marketing is vulnerable (CNVD-2018-03938)

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software, of which Oracle Marketing is a component for managing marketing-related information and processes. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Oracle E-Business Suite Oracle Marketing is vulnerable (CNVD-2018-03936)

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software, of which Oracle Marketing is a component for managing marketing-related information and processes. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Vulnerability in Oracle E-Business Suite Oracle Marketing

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software, of which Oracle Marketing is a component for managing marketing-related information and processes. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Unspecified Vulnerability in Oracle Financial Services Balance Sheet Planning Component (CNVD-2018-01702)

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle Financial Services Balance Sheet Planning is one of the Financial Services Balance Sheet Planning is one of the financial service...

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics Component

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

Unspecified Vulnerability in Oracle Communications Order and Service Management Component

Oracle Communications is a suite of Oracle applications for rapidly delivering and monetizing digital life communications.Oracle Communications Order and Service Management is one of the components used to coordinate activities between internal BOSS systems. Oracle Communications Order and Servic...

Unspecified Vulnerability in Oracle Financial Services Analytical Applications Infrastructure Component

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management.Oracle Financial Services Analytical Applications Oracle Financial Services Analytical Applications Infrastructure is one of the financial services...

Unspecified Vulnerability in Oracle Hyperion Hyperion BI+ Component (CNVD-2018-01531)

Oracle Hyperion is a suite of financial modeling applications from Oracle that provides financial close, reporting, etc. Hyperion BI+ is one of the Business Intelligence platform components that provides management reporting and analysis on any data source. A security vulnerability exists in the...

Unspecified Vulnerability in Oracle Financial Services Profitability Management Component

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management, of which Oracle Financial Services Profitability Management is a financial services profitability management component. Oracle Financial Services...

Unspecified Vulnerability in Oracle Hospitality Cruise Dining Room Management Component

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hotel management from Oracle. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer satisfaction, etc...

Unspecified Vulnerability in Oracle Communications Unified Inventory Management Component (CNVD-2018-01728)

Oracle Communications is a suite of applications from Oracle Corporation for rapidly delivering and monetizing digital life communications.Oracle Communications Unified Inventory Management is one of the unified inventory management components. A security vulnerability exists in the Portal...