The vulnerability of the Common Components component of the Oracle Financials financial management platform, which allows a malicious actor to gain unauthorized access to create, modify, and delete data.

The vulnerability of the Common Components component of the Oracle Financials financial management platform, part of the Oracle E-Business Suite, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

PT-2024-7483 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in privilege management within the Common Log File System CLFS driver of Microsoft Windows operating systems. It allows an attacker to potentially...

CVE-2024-48927

creationtimestamp| type| source ---|---|--- 2024-10-22 18:48:00+00:00| seen| https://t.me/cvedetector/8619...

Incorrect Authorization

Overview Umbraco.Cms.Web.Common is a package containing the web assembly needed to run Umbraco CMS. Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can gain unauthorized access to sensitive functionalities by exploiting the permissions of low-privilege...

CVE-2024-50311

creationtimestamp| type| source ---|---|--- 2024-10-22 17:07:37+00:00| seen| https://t.me/cvedetector/8608 2025-02-25 08:25:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5258...

CVE-2024-40083

creationtimestamp| type| source ---|---|--- 2024-10-22 00:24:34+00:00| seen| https://t.me/cvedetector/8587...

Malicious code in @ng-cat/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c0268f0af6152271247edc368914f17157c4261598da984de9ee52333993057 The OpenSSF Package Analysis project identified '@ng-cat/common' @ 9.99.9 npm as malicious. It is considered malicious because: - The package...

[SECURITY] Fedora 41 Update: containers-common-0.60.4-4.fc41

This package contains common configuration files and documentation for contai ner tools ecosystem, such as Podman, Buildah and Skopeo. It is required because the most of configuration files and docs come from pro jects which are vendored into Podman, Buildah, Skopeo, etc. but they are not packag ...

CVE-2024-49262

creationtimestamp| type| source ---|---|--- 2024-10-17 23:20:50+00:00| seen| https://t.me/cvedetector/8250...

CVE-2020-9371

creationtimestamp| type| source ---|---|--- 2024-10-17 16:56:47+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/787...

Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005536 fixes several issues. The following security issues were fixed: CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfochangednotify bsc1225739. CVE-2024-40954:...

CVE-2024-21264

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Activity Guide Composer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2024-21270

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Tasks. Supported versions that are affected are 12.2.6-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common...

CVE-2024-21282

Vulnerability in the Oracle Financials product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials. Successful...

CVE-2024-21270

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Tasks. Supported versions that are affected are 12.2.6-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common...

CVE-2024-21264

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Activity Guide Composer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2024-21264

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Activity Guide Composer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2024-21268

...

CVE-2024-21270

CVE-2024-21270 affects Oracle E-Business Suite, specifically the Oracle Common Applications Calendar component (Tasks) in versions 12.2.6–12.2.13. The connected PT-2024-7010 entry notes an exploit path via network access (HTTP) by a low-privileged actor leading to unauthorized creation/deletion/m...

CVE-2024-21264

The CVE-2024-21264 entry concerns Oracle PeopleSoft Enterprise CC Common Application Objects, component Activity Guide Composer, affected in version 9.2. Affected: PeopleSoft Enterprise CC Common Application Objects. Root cause: not explicitly detailed beyond the vulnerable component. Impact: a l...