Design/Logic Flaw

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications Applications component: Customer, Config, Pricing Manager. Supported versions that are affected are 12.0.0.3.0-12.0.0.7.0. Easily exploitable vulnerability allows high privileged attacker wit...

Design/Logic Flaw

Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications component: Admin Configuration. The supported version that is affected is 3.0.3.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

Design/Logic Flaw

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications component: Core. Supported versions that are affected are 7.1.0 and 8.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via UDP to compromise Oracle...

Oracle Communications Applications 安全漏洞

Oracle Communications Applications is an advanced communications and collaboration services application from Oracle Corporation. A security vulnerability exists in Oracle Communications BRM that can be exploited by an attacker to allow an elevated privilege attacker to log in to the infrastructur...

Oracle Communications Converged Application Server 安全漏洞

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation. A security vulnerability exists in Oracle Communications Converged Application Server versions 7.1...

Oracle Communications Applications 安全漏洞

Oracle Communications Applications etc. are products of Oracle Corporation USA.Oracle Communications Applications is an advanced communications and collaboration services application.Oracle Communications is a product. ecto, etc. are products of elixir-ecto open source. ecto is a toolkit for data...

CVE-2023-21890

Summary: CVE-2023-21890 affects Oracle Communications Converged Application Server (Core) versions 7.1.0–8.0.0. An input-validation flaw in the Core component allows an unauthenticated attacker with network access via UDP to compromise the server, potentially taking over the affected system. Impa...

CVE-2023-21848

Oracle Communications Convergence (Admin Configuration) vulnerable in version 3.0.3.1.0 due to insufficient input validation. A remote, low-privilege attacker with network access over HTTP can potentially take over the system. Public details in PT-2023-1195 confirm the issue and note that a fix i...

CVE-2023-21824

CVE-2023-21824 affects Oracle Communications BRM – Elastic Charging Engine, within Oracle Communications Applications. Affected versions are 12.0.0.3.0 through 12.0.0.7.0. The vulnerability allows a high-privilege attacker who can log on to the infrastructure where the Elastic Charging Engine run...

PT-2023-1184 · Oracle · Oracle Communications Converged Application Server

Name of the Vulnerable Software and Affected Versions: Oracle Communications Converged Application Server versions 7.1.0 through 8.0.0 Description: The issue is related to insufficient input validation in the Core component of the Oracle Communications Converged Application Server, allowing an...

Shopware 输入验证错误漏洞

Shopware is a suite of open source e-commerce software from German company Shopware. An input validation error vulnerability exists in Shopware, which arises from a failure to fully check the double validation of communications and can skip parts of the process...

CVE-2023-22597

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission of Sensitive Information. They use an unsecured channel to communicate with the cloud platform by default. An...

CVE-2022-43539

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

CVE-2022-43539

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

CVE-2022-43539

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

PT-2023-14250 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.12 and below Description: A vulnerability exists in the ClearPass Policy Manager cluster communications, allowing an attacker in a privileged...

The vulnerability of the Ethernet interfaces of Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in the execution of operations outside the buffer in memory, allowing attackers to cause system failures.

The vulnerability of the Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially created OPC packets...

Trojan.Win32.DarkNeuron.gen MVID-2022-0661 Named Pipe NULL DACL

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/d891c9374ccb2a4cae2274170e8644d8.txt Contact: [email protected] Media: twitter.com/malvuln Backup media: infosec.exchange/@malvuln Threat: Trojan.Win32.DarkNeuron.gen Vulnerability: Named...

D-Link DIR-3060 Buffer Overflow Vulnerability

D-Link DIR-3060 is a router from China Friendship Communications D-Link Inc. It provides a function to connect to the network.The D-Link DIR-3060 DIR3060A1FW111B04.bin version contains a buffer overflow vulnerability, which stems from a boundary error in FUN0049ac18 when handling untrusted input....

ALSA-2022:7979 Low: speex security update

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates. Security Fixes: speex: divide by zero in readsamples via crafted WAV file CVE-2020-23903 For more details about the security issues, including the impact, a CVSS...