CVE-2017-3631: Improper Restriction of Operations within the Bounds of a Memory Buffer

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful...

CVE-2017-3630: Out-of-bounds Write

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

PT-2017-16051

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite Solaris component versions 10 and 11 Description The issue allows a low-privileged attacker with logon access to the infrastructure to compromise Solaris, resulting in unauthorized access to some Solaris data...

PT-2017-9354

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.2 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands via the "MultiReport" function. This can potentially lead to unauthorized data access or modification...

Google Android Bluetooth Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Bluetooth is a component. A power lifting vulnerability exists in the Bluetooth component of Android. An attacker can exploit this vulnerability to gain unauthorized acce...

Oracle Automatic Service Request Unauthorized Access Vulnerability

Oracle Support Tools is a suite of Oracle support tools from Oracle Corporation.Automatic Service Request ASR is a component that provides case generation for specific hardware failures.ASR Manager is a subcomponent that accepts failure data sent by the asset. ASR Manager is a sub-component that...

CVE-2017-8441: Incorrect Execution-Assigned Permissions

Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to index aliases. This bug could allow a user with restricted permissions to view data they should not have access to when performing certain operations against an index alias...

CVE-2017-5646

For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...

CVE-2017-5646

Summary: Apache Knox versions 0.2.0–0.11.0 are vulnerable to an impersonation weakness when accessing WebHDFS, allowing an authenticated user to impersonate another user via a specially crafted URL, potentially enabling escalated privileges and unauthorized data access. The activity is audit logg...

PT-2017-16641

Name of the Vulnerable Software and Affected Versions Apache Knox versions 0.2.0 through 0.11.0 Description An authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox, potentially resulting in escalated privileges and unauthorized...

CVE-2017-5646: Origin Validation Error

For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...

Oracle PeopleSoft Enterprise SCM Service Procurement Remote Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, of which PeopleSoft Enterprise SCM is a supply chain management component. A remote security vulnerability exists in Oracle PeopleSoft Enterprise SCM Service Procurement. An attacker...

Heap overflow

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file...

Oracle Java SE 6 < Update 151 / 7 < Update 141 / 8 < Update 131 Multiple Vulnerabilities

Binary data 700090.prm...

MGASA-2017-0135 Updated virtualbox packages fixes security vulnerabilities

This update provides virtualbox 5.1.22 maintenance release and resolves at least the following security issues: A vulnerability in the core subcomponent of virtualbox allows high privilegied attacker unauthorized read access to a subset of VirtualBox accessible data CVE-2017-3513. A vulnerability...

Oracle FLEXCUBE Enterprise Limits and Collateral Management Unauthorized Modification Vulnerability

Oracle Financial Services Applications is Oracle's suite of financial services software that combines core banking, online banking, and property management.Oracle FLEXCUBE Enterprise Limits and Collateral Oracle FLEXCUBE Enterprise Limits and Collateral Management is one of the components used to...

Oracle FLEXCUBE Universal Banking Unauthorized Operation Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle FLEXCUBE Universal Banking is one of the real-time, online coverage of retail, group...Oracle FLEXCUBE Universal Banking is a...

Oracle FLEXCUBE Investor Servicing Remote Vulnerability (CNVD-2017-06277)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking and asset management. Oracle FLEXCUBE Investor Servicing is one of the components that provides life-cycle processing of cross-business hedge funds, mutual funds and unit-linke...

Oracle FLEXCUBE Enterprise Limits and Collateral Management Remote Vulnerability (CNVD-2017-06284)

Oracle Financial Services Applications is Oracle's suite of financial services software that combines core banking, online banking, and property management.Oracle FLEXCUBE Enterprise Limits and Collateral Oracle FLEXCUBE Enterprise Limits and Collateral Management is one of the components used to...

Oracle Primavera P6 Enterprise Project Portfolio Management Unauthorized Operation Vulnerability

Oracle Primavera Products Suite is a suite of project portfolio management solutions from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 EPPM is one of the components used for project planning, management and execution. Primavera P6 Enterprise Project Portfolio...