OESA-2023-1486 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

CVE-2023-27505

Incorrect default permissions in some IntelR Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27505

Intel’s advisory CVE-2023-27505 applies to Intel® Advanced Link Analyzer Standard Edition installers prior to version 22.1.1, where incorrect default permissions may allow an authenticated user to escalate privileges via local access. The vulnerability affects the installer component and is rated...

CVE-2023-27505

Incorrect default permissions in some IntelR Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Advanced Link Analyzer Standard Edition Security Vulnerability

Intel Advanced Link Analyzer Pro is an advanced link analyzer from Intel Corporation USA. Allows fast and easy evaluation of high-speed serial link performance to estimate optimal link parameter settings. A security vulnerability exists in IntelR Advanced Link Analyzer Standard Edition prior to...

CVE-2023-36306

A Cross Site Scripting XSS vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code via the asktheoracle.php, details.php, index.php, search.php, export.php, reports.php, and statistics.php components...

HPESBGN04499 rev.2 - HPE Unified Correlation Analyzer, Multiple Vulnerabilities

Potential Security Impact: Local: Directory Traversal; Remote: Access Restriction Bypass, Authentication Bypass, Code Execution, Denial of Service DoS, Disclosure of Information, XML External Entity XXE, Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified...

Intel® Advanced Link Analyzer Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00848.html...

The vulnerability of the Visual Analyzer component of the Oracle Business Intelligence Enterprise Edition software platform allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Visual Analyzer component of the Oracle Business Intelligence Enterprise Edition software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or to modify, add, or delete...

Information Disclosure

gitlab is vulnerable to Information Disclosure. Missing validation in DAST analyzer allows custom request headers to be sent with every request, regardless of the host...

CVE-2023-22061

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Visual Analyzer. The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2023-22061

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Visual Analyzer. The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Visual Analyzer. The supported version that is affected is 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2023-22061

CVE-2023-22061 affects Oracle Analytics’ Oracle BI Enterprise Edition (OBIEE) Visual Analyzer. Affected product/version: OBIEE 6.4.0.0.0. Vulnerability allows an attacker with network access over HTTP and low privileges to exploit, with user interaction, to compromise data: unauthorized update/in...

CVE-2023-33231 XSS in SolarWinds Database Performance Analyzer 2023.2

XSS attack was possible in DPA 2023.2 due to insufficient input validation...

WordPress Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1...

PT-2023-4026 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition version 6.4.0.0.0 Description: The issue is related to errors in processing input data in the Visual Analyzer component of Oracle Business Intelligence Enterprise Edition. This can allow a remot...

Oracle Business Intelligence Enterprise Edition 安全漏洞

Oracle Business Intelligence Enterprise Edition is an intelligent business analytics software from Oracle. It provides visual analysis of enterprise data to support decision-making, reduce total cost of ownership, and increase ROI across the organization. A security vulnerability exists in Oracle...

yaraQA - YARA Rule Analyzer To Improve Rule Quality And Performance

YARA rule Analyzer to improve rule quality and performance Why? YARA rules can be syntactically correct but still dysfunctional. yaraQA tries to find and report these issues to the author or maintainer of a YARA rule set. The issues yaraQA tries to detect are e.g.: rules that are syntactically...

The vulnerability of LISP traffic analyzer software in Wireshark allows a hacker to cause a service failure.

The vulnerability of the LISP analyzer in Wireshark for analyzing computer network traffic is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by injecting a specific package or creating a capture file...