PT-2016-3060

Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 JRockit version R28.3.12 Description The issue is related to the Networking component of Oracle Java SE and can be exploited by an unauthenticated attacker with network...

CVE-2016-6722: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is...

CVE-2016-6746

An information disclosure vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission...

Google Pixel C NVIDIA GPU driver information leak vulnerability

The Google Pixel C is a tablet computer from Google, U.S.A. The NVIDIA GPU driver is an NVIDIA graphics processor driver component used in the... An information disclosure vulnerability exists in the NVIDIA GPU driver in Google Pixel C. An attacker could exploit this vulnerability to access...

CVE-2016-5202

browser/extensions/api/dial/dialregistry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase call, which causes the erase operation to access data that that erase operation will destroy...

Unspecified Vulnerability in Oracle E-Business Suite Customer Interaction History Component

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Corporation, of which Oracle Customer Interaction History is one of the customer interaction history management components. A remote security vulnerability exists in the...

Unspecified Vulnerability in Oracle MySQL Server Component (CNVD-2016-10079)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A local security vulnerability exists in the Server: Security: Encryption subcomponent of the MySQL Server...

Unspecified Vulnerability in Oracle Supply Chain Products Suite Oracle Agile PLM Component (CNVD-2016-10082)

Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle, which provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Agile PLM Product Lifecycle Management is one of the lifecycle management components. Oracle Agile PLM Product...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise HCM

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the Human Capital Management HCM components. An unspecified...

Oracle Hospitality Applications Unspecified Vulnerability in Oracle Hospitality OPERA 5 Property Services Component

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2016-09928)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle WebLogic Server Component (CNVD-2016-10057)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

PT-2016-7503

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager ALM versions prior to 5.3 SP3 Update 1 Description The issue allows remote attackers to execute arbitrary SQL commands via crafted traffic to the TCP port 4410. This can be achieved by sending malicious input...

PT-2016-6711

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 2.x through 2.3.5 Open Ticket Request System OTRS versions 4.x through 4.0.4 Open Ticket Request System OTRS versions 5.x through 5.0.4 Description The issue allows remote attackers to execute arbitrary...

EMC Avamar ADS and AVE Unauthorized Data Access Vulnerability

EMC Avamar is a remote backup and recovery solution. An unauthorized data access vulnerability exists in EMC Avamar versions prior to 7.1.2 and 7.2.x prior to 7.2.1, ADS, and AVE in the web-restore interface implementation. An authenticated remote user can read or delete directories via a Linux...

Apache Struts Class Method Access

The vulnerability of the CookieInterceptor class implementation in the Apache Struts software platform is related to deficiencies in access control when processing the cookiesName parameter with the symbol “”. Exploiting this vulnerability can allow an attacker to gain access to, read, modify, or...

OpenAFS Multiple Vulnerabilities - 01 - Windows

OpenAFS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openafs:openafs"; ifdescription...

Unspecified Vulnerability in Oracle PeopleSoft HCM Global Payroll Switzerland Security Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft HCM Global Payroll Switzerland Security component allows remote attackers to exploit the vulnerability to gain unauthorized access to data, resulting in the...

Unspecified Vulnerability in Oracle WebLogic WLS Core Component

Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the WLS Core component of Oracle WebLogic allows remote attackers to exploit the vulnerability to gain unauthorized access to data, modify it, an...

Unspecified Vulnerability in Oracle WebLogic WLS Core Component (CNVD-2016-00564)

Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the WLS Core component inside Oracle WebLogic allows remote attackers to conduct denial-of-service attacks by exploiting the vulnerability to gai...