CVE-2017-3494

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Retail Teller. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with netwo...

CVE-2017-3480

CVE-2017-3480 concerns Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected versions are 11.3.0, 11.4.0 and 12.0.1. The vulnerability is described as easily exploitable by an unauthenticated attacker with network access via HTTP to th...

CVE-2017-3482

CVE-2017-3482 describes a vulnerability in the Oracle FLEXCUBE Universal Banking Infrastructure subcomponent of Oracle Financial Services Applications. Affects supported versions 12.0.0 through 12.3.0. The issue is exploitable by a low-privilege, network-accessible attacker via HTTP, with human i...

CVE-2017-3494

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Retail Teller. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with netwo...

CVE-2017-3494

CVE-2017-3494 is a vulnerability in Oracle FLEXCUBE Universal Banking (subcomponent: Retail Teller). Affected versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2, and 12.0.3. An unauthenticated attacker with network access via HTTP can compromise the component; successful attacks require human interactio...

CVE-2017-3535

CVE-2017-3535 affects the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Affected versions are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to com...

CVE-2017-3485

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Difficult to exploit vulnerability allows low...

CVE-2017-3534

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low privileged attacker wi...

CVE-2017-3481

CVE-2017-3481 affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent) in Oracle Financial Services Applications. Affected versions are 11.3.0, 11.4.0 and 12.0.1. The vulnerability is exploitable by a low-privileged attacker over HTTP and can lead to partial denial of service again...

CVE-2017-3535

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2 and 12.0.3. Easily "exploitable" vulnerability allows unauthenticated attacker with...

Chrome Universal XSS by loading a javascript: URI from an unloaded window (CVE-2015-1293)

VULNERABILITY DETAILS From /WebKit/Source/core/frame/DOMWindow.cpp: bool DOMWindow::isInsecureScriptAccessLocalDOMWindow& callingWindow, const String& urlString if !protocolIsJavaScripturlString return false; // If this DOMWindow isn't currently active in the Frame, then there's no // way we shou...

Chrome Universal XSS using deferred history loads (CVE-2016-1675)

VULNERABILITY DETAILS When a ScopedPageLoadDeferrer is destroyed, the deferring state is updated on the associated pages and loaders. If any history of load was set aside during the event loop the deferrer has been protecting, it's processed during the update without checking if navigation is...

Chrome Universal XSS using Flash message loop (CVE-2016-1631)

VULNERABILITY DETAILS From /content/renderer/pepper/ppbflashmessageloopimpl. cc: int32t PPBFlashMessageLoopImpl::InternalRun const RunFromHostProxyCallback& callback ... // It is possible that the PPBFlashMessageLoopImpl object has been // destroyed when the nested message loop exits. scopedrefpt...

Chrome Universal XSS using navigator.serviceWorker.ready (CVE-2015-1292)

VULNERABILITY DETAILS From /WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp: ScriptPromise ServiceWorkerContainer::readyScriptState callerState if !executionContext return ScriptPromise; ... if !mready mready = createReadyProperty; if mprovider mprovider-getRegistrationForReadynew...

Chrome Universal XSS via the unload_event module (CVE-2015-6769)

VULNERABILITY DETAILS From /WebKit/Source/core/loader/DocumentLoader.cpp: PassRefPtrWillBeRawPtr DocumentLoader::createWriterForconst Document ownerDocument, const DocumentInit& init, ... LocalFrame frame = init.frame; ASSERT!frame-document || !frame-document-isActive; ASSERTframe-tree.childCount...

Chrome Universal XSS using an intercepted native function (CVE-2016-1672)

VULNERABILITY DETAILS The fix for the issue 546677 is insufficient to protect against overriding the internal extensions code -- it is still possible to take over the built-in extension system with a combination of getters and setters. This allows web content to gain access to native functions th...

Chrome Universal XSS via the interception of |Binding| with Object.prototype.create (CVE-2016-1674)

VULNERABILITY DETAILS The fix for the issue 590118 is insufficient to protect against the bindings interception. While they can't be accessed by triggering accessors on the |modules| object anymore, it's still possible to trap the set operation for |Binding. create| using the Object. prototype...

Linux kernel denial of service vulnerability (CNVD-2017-05859)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the drivers/net/usb/pegasus.c file in versions 4.9.x of the Linux kernel prior to 4.9.11, which can be exploited by a local attacke...

Chrome Universal XSS by circumventing the unload event ( CVE-2016-1623)

VULNERABILITY DETAILS From /thirdparty/WebKit/Source/core/dom/Document.cpp: void Document::dispatchUnloadEvents PluginScriptForbiddenScope forbidPluginDestructorScripting; RefPtrWillBeRawPtrprotectthis; if mparser mparser-stopParsing; if mloadEventProgress == LoadEventNotRun return; if...

Chrome Universal XSS using IDBKeyRange static methods(CVE-2015-1268)

VULNERABILITY DETAILS Calling an object-returning static method with a cross-origin thing passed as |this| yields an object wrapped in the cross-origin scope. This is because FunctionCallbackInfo ends up with a cross-origin holder, and the holder acts as a creation context for the return value in...