6118 matches found
UBUNTU-CVE-2017-10078
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Scripting. The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...
CVE-2017-3633
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Memcached. Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL...
PT-2017-16071
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.5.56 and earlier Oracle MySQL versions 5.6.36 and earlier Oracle MySQL versions 5.7.18 and earlier Description The issue allows an attacker with network access via multiple protocols to compromise the MySQL Server...
PT-2017-16072 · Mysql Server +6 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.56 and earlier MySQL Server versions 5.6.36 and earlier MySQL Server versions 5.7.18 and earlier Description: The issue allows a low-privileged attacker with network access via multiple protocols to compromise the...
PT-2017-16053
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.36 and earlier Oracle MySQL versions 5.7.18 and earlier Description The issue allows an unauthenticated attacker with network access via Memcached to compromise the MySQL Server. Successful attacks can result in the...
Unspecified Vulnerability in Oracle Customer Interaction History
Oracle E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation.Oracle Customer Interaction History is one of the customer interaction history management components. A security vulnerability exists in the User Interface subcomponent of the Oracle...
CVE-2017-3630: Out-of-bounds Write
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...
CVE-2017-3631: Improper Restriction of Operations within the Bounds of a Memory Buffer
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful...
PT-2017-16051
Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite Solaris component versions 10 and 11 Description The issue allows a low-privileged attacker with logon access to the infrastructure to compromise Solaris, resulting in unauthorized access to some Solaris data...
PT-2017-9354
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 3.0.0 through 4.2.2 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands via the "MultiReport" function. This can potentially lead to unauthorized data access or modification...
Oracle Automatic Service Request Unauthorized Access Vulnerability
Oracle Support Tools is a suite of Oracle support tools from Oracle Corporation.Automatic Service Request ASR is a component that provides case generation for specific hardware failures.ASR Manager is a subcomponent that accepts failure data sent by the asset. ASR Manager is a sub-component that...
Google Android Bluetooth Privilege Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Bluetooth is a component. A power lifting vulnerability exists in the Bluetooth component of Android. An attacker can exploit this vulnerability to gain unauthorized acce...
CVE-2017-8441: Incorrect Execution-Assigned Permissions
Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to index aliases. This bug could allow a user with restricted permissions to view data they should not have access to when performing certain operations against an index alias...
CVE-2017-5646
Summary: Apache Knox versions 0.2.0–0.11.0 are vulnerable to an impersonation weakness when accessing WebHDFS, allowing an authenticated user to impersonate another user via a specially crafted URL, potentially enabling escalated privileges and unauthorized data access. The activity is audit logg...
CVE-2017-5646
For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...
CVE-2017-5646: Origin Validation Error
For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this activity is audit logged and can be...
PT-2017-16641
Name of the Vulnerable Software and Affected Versions Apache Knox versions 0.2.0 through 0.11.0 Description An authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox, potentially resulting in escalated privileges and unauthorized...
Oracle PeopleSoft Enterprise SCM Service Procurement Remote Vulnerability
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, of which PeopleSoft Enterprise SCM is a supply chain management component. A remote security vulnerability exists in Oracle PeopleSoft Enterprise SCM Service Procurement. An attacker...
