CVE-2020-1967

CVE-2020-1967 describes a NULL pointer dereference in OpenSSL’s SSL_check_chain() during or after a TLS 1.3 handshake, caused by incorrect handling of the signature_algorithms_cert extension. A malicious peer sending an invalid/unrecognized signature algorithm can crash the server/client, enablin...

CVE-2008-4000

CVE-2008-4000 concerns an authentication weakness in Oracle PeopleTools used by PeopleSoft Enterprise and JD Edwards EnterpriseOne (notably PeopleTools 8.49.14 and 8.48.18). The Imperva advisory (SecurityVULNS:DOC:20750) details that the system’s authentication and account lockout can be bypassed...

CVE-2008-5451

CVE-2008-5451 affects the JD Edwards Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.97.2.5. The vulnerability is described as allowing remote authenticated users to affect confidentiality via unknown vectors. The root cause, exact exploit path, and affected version...

CVE-2008-5455

CVE-2008-5455 describes an unspecified vulnerability in the PeopleSoft Enterprise HRMS - ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18, allowing remote authenticated users to affect confidentiality and integrity via unknown vectors. Public details indi...

CVE-2008-5452

CVE-2008-5452 affects Oracle PeopleSoft Enterprise HRMS (and JD Edwards EnterpriseOne 8.9.18) with an unspecified vulnerability that allows remote authenticated users to impact confidentiality and integrity via unknown vectors. The NVD entry notes a CVSS v2 base score of 5.5 (medium) with network...

CVE-2008-1828

Technical details are not publicly available in the provided documents. No concrete information on affected components, impact, or remediation is given here; monitor for updates from official advisories.

CVE-2008-4004

CVE-2008-4004 affects the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne versions 8.97.2.2 and 8.98.0.1. The vulnerability is described as unspecified with local access impacting confidentiality and integrity via unknown vectors; n...

CVE-2008-1830

Technical details about CVE-2008-1830 are not publicly provided in the supplied documents. No concrete affected products, root cause, impact, or remediation are specified here. Monitor for updates from official sources.