CVE-2014-0050

This CVE affects Apache Commons FileUpload (MultipartStream.java) before version 1.3.1, as used in Apache Tomcat, JBoss Web, and other products. The root cause is a crafted Content-Type header that bypasses the loop exit conditions, allowing remote attackers to trigger an infinite loop and high C...

CVE-2016-0436

The provided CVE entry CVE-2016-0436 concerns an unspecified vulnerability in Oracle Retail Point-of-Service (POS) within Oracle Retail Applications versions 13.4, 14.0, and 14.1. The description states the issue could affect confidentiality via vectors related to Mobile POS and notes it is a dis...

CVE-2015-4827

CVE-2015-4827 affects the Oracle Retail Open Commerce Platform component within Oracle Retail Applications 3.0. The vulnerability is described as allowing remote attackers to affect confidentiality and integrity via unknown vectors related to Framework. No root cause or specific exploit vectors a...

CVE-2015-0466

Oracle Retail Applications’ Retail Back Office component (versions 12.0, 12.0IN, 13.0–13.4, 14.0–14.1) contains an unspecified vulnerability that allows remote attackers to affect integrity via unknown vectors. Root cause and exploit details are not provided in the connected documents; the NVD en...

CVE-2015-0494

CVE-2015-0494 concerns the Oracle Retail Central Office component of Oracle Retail Applications (versions 13.1–14.1). The vulnerability is described as unspecified and allows remote attackers to affect integrity via unknown vectors; CVSS notes a network attack vector with partial integrity impact...

CVE-2016-0438

CVE-2016-0438 affects the Oracle Retail Point-of-Service component in Oracle Retail Applications (versions 13.4, 14.0, 14.1). The vulnerability is described as an unspecified issue that allows local users to affect confidentiality via vectors related to the Mobile POS subsystem; it is noted as a ...

CVE-2016-0435

Technical details about CVE-2016-0435 are not publicly available in the provided documents. No affected versions, vulnerable components, impact specifics, or fixes are disclosed here; monitor for updates.

CVE-2016-0434

CVE-2016-0434 concerns Oracle Retail Applications’ Point-of-Service component (Oracle Retail POS) across versions 13.4, 14.0, and 14.1. The connected CNVD/NVD entries describe an unspecified vulnerability in the Oracle Retail Point-of-Service Mobile POS component that could be exploited by a loca...

CVE-2016-0437

CVE-2016-0437 concerns an unspecified vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (versions 13.4, 14.0, 14.1) that could allow local users to affect confidentiality via vectors related to Mobile POS. The description notes this is a distinct issue fr...