21366 matches found
PT-2024-20610 · Unknown · Knowledge Base For Documentation
Name of the Vulnerable Software and Affected Versions: Knowledge Base for Documentation, FAQs with AI Assistance versions n/a through 11.30.2 Description: The issue is related to Deserialization of Untrusted Data, which affects the Knowledge Base for Documentation, FAQs with AI Assistance plugin...
The vulnerability of the Trusted Computing Base (TCB) system in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Trusted Computing Base TCB system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the log_entry_attr function in the 389-ds-base component of the Red Hat Enterprise Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the logentryattr function in the 389-ds-base component of the Red Hat Enterprise Linux operating system is related to buffer overflow in the “bucket” mechanism. Exploiting this vulnerability can allow an attacker to cause a service failure...
[SECURITY] Fedora 39 Update: qt5-qtbase-5.15.12-5.fc39
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
CVE-2024-20958
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed...
CVE-2024-20958
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed...
CVE-2024-20941
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: HTML UI. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful...
CVE-2024-20935
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...
CVE-2024-20933
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...
CVE-2024-20917
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Log Management. The supported version that is affected is 13.5.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Design/Logic Flaw
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Log Management. The supported version that is affected is 13.5.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Design/Logic Flaw
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: HTML UI. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful...
Design/Logic Flaw
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...
CVE-2024-20958
CVE-2024-20958 affects Oracle E-Business Suite, specifically Oracle Installed Base (Engineering Change Order) in versions 12.2.3–12.2.13. The root cause is insufficient input validation in Engineering Change Order within Installed Base, enabling a low-privilege, network-accessible attacker to lev...
CVE-2024-20933
CVE-2024-20933 affects Oracle E-Business Suite – Oracle Installed Base (Engineering Change Order) with affected versions 12.2.3–12.2.13. The vulnerability allows an unauthenticated attacker over HTTP to compromise Oracle Installed Base, with attacks requiring user interaction, and potentially lea...
CVE-2024-20917
Oracle Enterprise Manager Base Platform, Log Management component, version 13.5.0.0 is affected by CVE-2024-20917. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Base Platform, with human interaction required, and can lead to unauthorized data ...
CVE-2024-25580
A vulnerability has been discovered in Qt Base, wherein an attacker can exploit a specially crafted KTX image file to induce a buffer overflow within the application parsing it. This overflow can subsequently result in a denial-of-service condition, rendering the affected application inaccessible...
Security Bulletin: There are multiple vulnerabilities in IBM SDK, Java Technology Edition that is shipped with CICS Transaction Gateway Desktop Edition (CVE-2023-22045 and CVE-2023-22049).
Summary There are multiple vulnerabilities in IBM SDK, Java Technology Edition that is shipped with CICS Transaction Gateway Desktop Edition CVE-2023-22045 and CVE-2023-22049. An update to CICS Transaction Gateway Desktop Edition has been released to address these vulnerabilities. Vulnerability...
Security Bulletin: Multiple urllib vulnerabilities may affect IBM Storage Scale (CVE-2023-43804)
Summary Multiple vulnerabilities in urllib repo, used by the IBM Storage Scale call home feature, which could allow a remote authenticated attacker to obtain sensitive information. Vulnerability Details CVEID:CVE-2023-45803 DESCRIPTION: urllib3 could allow a remote authenticated attacker to obtai...