PT-2017-1134

Name of the Vulnerable Software and Affected Versions Java SE version 8u112 Description The issue is related to inadequate access control in the Java Mission Control component of Oracle Java SE, allowing an unauthenticated attacker with network access via multiple protocols to compromise Java SE...

PT-2017-1135

Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 Description The issue is related to a vulnerability in the Java SE and Java SE Embedded component, specifically in the Networking subcomponent. This vulnerability allows a...

UBUNTU-CVE-2017-3319

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: X Plugin. Supported versions that are affected are 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

PT-2017-1146

Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 Description The issue is related to a lack of protection for service data in the Java Platform's Networking component. This allows a remote attacker to gain unauthorized...

PT-2017-15778

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.7.16 and earlier Description The issue allows a high privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks require human interaction from a person other than t...

PT-2015-2465

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server versions 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 Description The issue is related to errors in the code of the Oracle HTTP Server component in Oracle Fusion Middleware. It may allow a remote attacker to gain...

PT-2015-2549

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 11.1.1.9 Description The issue is related to an unspecified vulnerability in the Oracle HTTP Server component, which can allow remote attackers to affect confidentiality. This vulnerability is associated with...

PT-2015-2490

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, 12.2.4 Description The issue is related to errors in the code of the Oracle Report Manager component, specifically the Reports Security subcomponent, which can allow a remote...

PT-2015-2467

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.2.2 through 11.1.2.3 Description The issue is related to errors in the code of the Oracle Access Manager component, which can be exploited by a remote attacker to gain unauthorized read access to data. Th...

PT-2015-2568

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.4 Description The issue is related to an unspecified vulnerability in the Oracle Applications DBA component, allowing remote authenticated users to affect confidentiality. This vulnerability...

PT-2015-2541

Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite version 9.3.4 Description The issue is related to an unspecified vulnerability in the Oracle Agile PLM component, which can be exploited by remote authenticated users to affect confidentiality. The...

PT-2019-5368 · Mysql Server +8 · Mysql Client +8

Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.6.47 and prior MySQL Client versions 5.7.29 and prior MySQL Client versions 8.0.18 and prior Description: The issue is related to a lack of protection for service data in the MySQL Client C API component. It allows a...

CVE-2013-3976: Undefined Security Weakness

The 1 Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the 2 FlashCopy Manager for Exchange component 2.2 and 3.1 before 3.1.1 in IBM Tivoli Storage FlashCopy Manager do not properly constrain mailbox contents during certain...

CVE-2013-1859: Undefined Security Weakness

The Node Parameter Control module 6.x-1.x for Drupal does not properly restrict access to the configuration options, which allows remote attackers to read and edit configuration options via unspecified vectors...

Solaris 10 (x86) : 148769-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Text Utilities. The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized read...

CVE-2012-3802: Undefined Security Weakness

Unspecified vulnerability in the Post Affiliate Pro PAP module for Drupal allows remote authenticated users to read the commissions of other users via unknown attack vectors...

Distributed Network Protocol v3 'Unauthorized Read Request' Alert (SCADA) (deprecated)

Binary data 6249.prm...

PT-2011-1037

Name of the Vulnerable Software and Affected Versions acpid versions prior to 2.0.11 Description The issue allows local users to potentially perform unauthorized write operations within directories created by a script or read files created by a script due to insufficient umask settings in...

CVE-2009-4299: Undefined Security Weakness

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors...

CVE-2008-6548: Missing Authorization

The rst parser parser/textrst.py in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors...