CVE Vulnerability Catalog

Vulnerability in the Oracle Hospitality Cruise AffairWhere component allows a low privileged attacker with access to the infrastructure to compromise the system. It requires human interaction from a person other than the attacker, and successful attacks can lead to takeover of the system.

Vulnerability in the PT PeopleTools component of Oracle PeopleSoft Enterprise allows an unauthenticated attacker with network access via HTTP to take control of the system. Affects versions 8.54, 8.55, and 8.56.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server. The attacker can cause hangs or frequent crashes of the server and gain unauthorized access to data.

A vulnerability in the Java SE and Java SE Embedded components allows easy exploitation by an unauthenticated attacker with network access. It requires human interaction, which may lead to the takeover of Java SE or Java SE Embedded.

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Gantt Server) allows unauthenticated attackers with network access via HTTP to compromise the applications. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data.

Vulnerability in the Oracle Global Order Promising component of Oracle E-Business Suite allows unauthenticated attackers with network access via HTTP to compromise the system. Attackers can create, delete, or modify critical data within the system.

Vulnerability in the Java SE and Java SE Embedded components of Oracle Java SE, related to RMI, allows an unauthenticated attacker with network access to compromise these systems. Attacks require human interaction, which may lead to takeover of Java SE and Java SE Embedded.

A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines (VMs) operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation of certain authentication mechanisms in the URL of the web console.

The net/http library in Go before version 1.4.3 does not properly parse HTTP headers, allowing remote attackers to conduct HTTP request smuggling attacks via a request with two Content-length headers.

The net/http library in Go before version 1.4.3 does not properly parse HTTP header keys, allowing remote attackers to conduct HTTP request smuggling attacks via a space instead of a hyphen.

There is an SQL injection vulnerability in the login form of GSI WiNPAT Portal versions 3.2.0.1001 through 3.6.1.0 that allows remote attackers to execute arbitrary SQL commands via the username field.

The function in charge of checking whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value.

In PHPSUGAR PHP Melody before version 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php.

A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. The application does not verify string size before copying to memory, which may allow an attacker to crash the application or run arbitrary code.

CVE-2017-15539 describes an SQL Injection vulnerability in the zorovavi/blog application identified up to October 17, 2017. This vulnerability affects the id parameter in recept.php.

The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution.

Debian ftpsync before 20171017 does not use the rsync --safe-links option, allowing remote attackers to conduct directory traversal attacks via a crafted upstream mirror.

Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code.

nw.js before 0.11.5 can simulate user input events in a normal frame, which allows remote attackers to have unspecified impact via unknown vectors.