CVE-2019-2487: Undefined Security Weakness

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite subcomponent: UI Infrastructure. Supported versions that are affected are 6.3.7, 6.4.1, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27286)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

CVE-2019-2400: Undefined Security Weakness

Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: User Registration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with networ...

CVE-2019-2402: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. The supported version that is affected is 2.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successfu...

CVE-2019-2407: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracl...

CVE-2019-2401: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...

CVE-2019-2409: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: SPMS Suite. The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with logon to the...

CVE-2019-2411: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: SPMS Suite. The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via TCP t...

CVE-2019-2463: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

The vulnerability of the Core sub-component of the Oracle VM VirtualBox allows a intruder to gain unauthorized access to protected data.

The vulnerability of the Core sub-component of the Oracle VM VirtualBox is related to insufficient access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data...

PT-2019-1136 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue exists due to inadequate protection of the web page structure. An attacker could exploit this by sending a specially crafted request to the vulnerable server,...

The vulnerability of the rfbProcessClientNormalMessage() function in the cross-platform library LibVNCServer allows a hacker to trigger a service denial and gain unauthorized access to confidential data.

The vulnerability of the rfbProcessClientNormalMessage function in the cross-platform library LibVNCServer is related to insufficient cleaning of input data in VNC packets. Exploiting this vulnerability can allow an attacker to cause service failures and gain unauthorized access to confidential...

PT-2018-4013 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle iStore versions 12.1.1 through 12.1.3 Oracle iStore versions 12.2.3 through 12.2.8 Description: The issue is related to the Shopping Cart component of Oracle iStore in Oracle E-Business Suite. It allows an unauthenticated attacker with...

PT-2018-18584 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An elevation of privilege issue exists due to improper sanitization of specially crafted web requests. This could allow an attacker to perform cross-site scripting...

OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JSSE. Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with...

Unspecified Vulnerability in Oracle Fusion Middleware WebCenter Sites Component

Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, and WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences to drive sales and customer...

Unspecified Vulnerability in Oracle Hyperion Common Events Component

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial settlement, report production and other functions. Hyperion Common Events is one of the event processing components. A security vulnerability exists in the User...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise Interaction Hub Component

Oracle PeopleSoft Products is a set of Oracle's enterprise human capital management solutions, which provides human capital management, financial management, supplier relationship management and other functions.PeopleSoft Enterprise Interaction Hub is one of the enterprise, customer interaction...

Unspecified Vulnerability in Oracle Fusion Middleware Identity Manager

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Identity Manager is one of the enterprise identity management system components. An unspecifi...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2019-28263)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...