CVE-2017-10039

The CVE-2017-10039 issue affects Oracle Agile PLM Web Client in Oracle Supply Chain Products Suite, specifically versions 9.3.5 and 9.3.6. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle Agile PLM, with successful attacks requiring user inter...

PT-2017-3551

Name of the Vulnerable Software and Affected Versions: Saperion Web Client version 7.5.2 Description: The issue is related to insufficient access control in the Saperion Web Client, which can be exploited by a remote attacker to execute arbitrary code with elevated privileges. Recommendations: Fo...

CVE-2017-10039: Undefined Security Weakness

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite subcomponent: Web Client. Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM...

Oracle Agile PLM Remote Vulnerability (CNVD-2017-26392)

Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle, which provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Agile PLM Product Lifecycle Management is one of the lifecycle management components. Oracle Agile PLM Product...

OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)

It was discovered that the HTTP client implementation in the Networking component of OpenJDK could cache and re-use an NTLM authenticated connection in a different security context. A remote attacker could possibly use this flaw to make a Java application perform HTTP requests authenticated with...

OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)

It was discovered that the HTTP client implementation in the Networking component of OpenJDK could cache and re-use an NTLM authenticated connection in a different security context. A remote attacker could possibly use this flaw to make a Java application perform HTTP requests authenticated with...

OpenJDK: improper re-use of NTLM authenticated connections (Networking, 8163520)

It was discovered that the HTTP client implementation in the Networking component of OpenJDK could cache and re-use an NTLM authenticated connection in a different security context. A remote attacker could possibly use this flaw to make a Java application perform HTTP requests authenticated with...

CVE-2017-5151

An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. A SQL Injection vulnerability has been identified, which may allow remote code execution...

CVE-2017-5151

An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. A SQL Injection vulnerability has been identified, which may allow remote code execution...

CVE-2017-5151

An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. A SQL Injection vulnerability has been identified, which may allow remote code execution...

CVE-2017-5151: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. A SQL Injection vulnerability has been identified, which may allow remote code execution...

PT-2017-16345

Name of the Vulnerable Software and Affected Versions VideoInsight Web Client versions prior to 6.3.5.11 Description A SQL Injection issue has been identified, which may allow remote code execution. Recommendations For versions prior to 6.3.5.11, update to version 6.3.5.11 or later to resolve the...

VideoInsight Web Client

CVSS V3 7.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: VideoInsight Equipment: Web Client Vulnerability: SQL Injection AFFECTED PRODUCTS The following Web Client versions are affected: Web Client Version 6.3.5.11 and previous versions. IMPACT A successful exploit of this...

Social Media Infected Image File (ImageGate)

A vulnerability exists in a web kit used by major web servers. A malicious code may be embedded in an image file. Specially crafted HTTP request is later used to manipulate a web client into executing the embedded code...

IDNA 2003 makes curl use wrong host

When curl is built with libidn to handle International Domain Names IDNA, it translates them to puny code for DNS resolving using the IDNA 2003 standard, while IDNA 2008 is the modern and up-to-date IDNA standard. This misalignment causes problems with for example domains using the German ß...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to WebClient / Admin...

The vulnerability of the Vmware vCenter Server virtual infrastructure management tool allows a attacker to inject arbitrary Web or HTML code.

The vulnerability of the vSphere Web Client component, which is used for managing the virtual infrastructure of Vmware vCenter Server, exists due to the lack of security measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary We...

The software for managing VMware vCenter Server is vulnerable, allowing a hacker to execute arbitrary Java code.

The vulnerability of the VMware vSphere Web Client software for managing virtual infrastructure, specifically the VMware vCenter Server, is related to configuration errors of the JMX server. These errors arise due to the lack of authentication and encryption procedures when clients connect to the...

CVE-2015-6931

Cross-site scripting XSS vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL...