CVE-2024-20990

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite component: Templates. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

CVE-2024-20989

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications component: Simphony POS. Supported versions that are affected are 19.1.0-19.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2024-20990

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite component: Templates. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

OpenJDK: integer overflow in C1 compiler address generation (8322122)

A flaw was found in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalV...

Improper Export of Android Application Components

Overview Affected versions of this package are vulnerable to Improper Export of Android Application Components in AuthenticationAgentActivity.cs, which can allow denial of service to applications on the same device using MSAL.NET for authentication. A malicious application installed by the victim...

CVE-2024-21014

CVE-2024-21014 concerns Oracle Hospitality Simphony, specifically the Simphony Enterprise Server. Technical details in connected docs show: affected versions are 19.1.0 through 19.5.4; root cause is insufficient input validation; attacker needs network access via HTTP and no authentication. Impac...

CVE-2024-21010

Oracle Hospitality Simphony (Simphony Enterprise Server) is affected across versions 19.1.0–19.5.4 due to insufficient input validation. The flaw allows a remote attacker with network access over HTTP and low privileges to execute arbitrary code and potentially take over the Simphony deployment; ...

CVE-2024-21005

CVE-2024-21005 affects Oracle Java SE / GraalVM Enterprise Edition (JavaFX). Affected: Oracle Java SE 8u401; GraalVM EE 20.3.13 and 21.3.9. Description notes a difficult-to-exploit vulnerability that requires network access via multiple protocols and user interaction, with potential unauthorized ...

CVE-2024-20997

CVE-2024-20997 affects Oracle Hospitality Simphony (Simphony Enterprise Server) with vulnerable versions 19.1.0–19.5.4. Root cause: insufficient input validation in Simphony Enterprise Server. Impact: takeover of Oracle Hospitality Simphony, with high confidentiality, integrity, and availability ...

CVE-2024-20989

Oracle Hospitality Simphony (Simphony POS) is affected in versions 19.1.0–19.5.4 due to insufficient input validation in the POS component. The vulnerability allows a remote, unauthenticated attacker with network access (HTTP) to modify, add, or delete data and potentially gain unauthorized acces...

Identity in the Shadows: Shedding Light on Cybersecurity's Unseen Threats

In today's rapidly evolving digital landscape, organizations face an increasingly complex array of cybersecurity threats. The proliferation of cloud services and remote work arrangements has heightened the vulnerability of digital identities to exploitation, making it imperative for businesses to...

CVE-2024-22262

Applications that use UriComponentsBuilder to parse an externally provided URL e.g. through a query parameter AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is...

Oracle E-Business Suite 的 Oracle Applications Framework 安全漏洞

Oracle E-Business Suite E-Business Suite and Oracle Applications Framework are both products of Oracle Corporation.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management an...

Oracle Food and Beverage Applications 安全漏洞

Oracle Food and Beverage Applications is a food and beverage sales management solution from Oracle Corporation USA. A security vulnerability exists in Oracle Hospitality Simphony for Oracle Food and Beverage Applications. An attacker has exploited the vulnerability to cause a takeover of Oracle...

PT-2024-3528 · Oracle · Oracle Web Applications Desktop Integrator

Name of the Vulnerable Software and Affected Versions: Oracle Web Applications Desktop Integrator versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the XML input component of Oracle Web Applications Desktop Integrator, part of the Oracle...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Applications...

UBUNTU-CVE-2024-2756

Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a Host- or Secure- cookie by PHP applications...

Oracle E-Business Suite 的 Oracle Web Applications Desktop Integrator 安全漏洞

Oracle E-Business Suite E-Business Suite is a suite of fully integrated global business management software from Oracle Corporation. The software provides customer relationship management, service management, financial management, and other functions. A security vulnerability exists in Oracle Web...

GHSA-2GVW-W6FJ-7M3C Argo CD's API server does not enforce project sourceNamespaces

Impact I can convince the UI to let me do things with an invalid Application. 1. Admin gives me p, michael, applications, , demo/, allow, where demo can just deploy to the demo namespace 2. Admin gives me AppProject dev which reconciles from ns dev-apps 3. Admin gives me p, michael, applications,...

Importance of Scanning Files on Uploader Applications

Delve into the crucial practice of file scanning within uploader applications, and learn defensive measures to safeguards against malicious threats like malware...