CVE-2021-2047: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to...

PT-2021-1710

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.1.3.0.0 Description The issue is related to insufficient access control in the Core Components of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP and T3 protocols to...

Oracle MySQL Server security vulnerabilities

Oracle MySQL is an open source relational database management system.MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Components Services component of Oracle MySQL Server 8.0.22 and...

PT-2021-1805

Name of the Vulnerable Software and Affected Versions: Oracle Coherence versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 Description: The issue is related to insufficient access control in the Core Components of Oracle Coherence, allowing an unauthenticated attacker with network...

Oracle Fusion Middleware WebLogic Server Authorization Issues Vulnerability

Oracle WebLogic Server is an Oracle application services middleware for cloud and traditional environments that provides a modern, lightweight development platform that supports the full lifecycle management of applications from development to production and simplifies application deployment and...

PT-2021-1709

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.1.3.0.0 Description The issue is related to insufficient access control in the Core Components of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP, T3 protocols to...

PT-2021-1797

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.22 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a hang or...

Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities

Summary IBM Security Privileged Identity Manager has addressed an issue for ICU as follows. Vulnerability Details CVEID: CVE-2020-10531 DESCRIPTION: International Components for Unicode ICU for C/C++ is vulnerable to a heap-based buffer overflow, caused by an integer overflow in...

January 12, 2021—KB4598275 (Security-only update)

January 12, 2021—KB4598275 Security-only update Applies To Windows 8.1 Windows Server 2012 R2 Windows Embedded 8.1 Industry Enterprise Windows Embedded 8.1 Industry Pro Note IMPORTANT Adobe Flash Player went out of support on December 31, 2020. For more information, see Adobe Flash end of support...

Microsoft Windows Print Spooler Components Security Vulnerability

Microsoft Windows Print Spooler Components is a printing background processor component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Print Spooler Components. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Window...

Microsoft Windows Print Spooler Components Access Control Error Vulnerability

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows Print Spooler Components. The following products and editions are affected:Windows Server 2012 R2 Server Core...

Unspecified vulnerability in Mozilla Rust arr crate

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Mozilla Rust versions prior to 2020-08-25 in arr crate, which stems from a buffer overflow in Index and IndexMut. No details of the vulnerability are provided at this time...

Google Warns of Critical Android Remote Code Execution Bug

Google has fixed two critical bugs affecting its Android handsets. The more serious flaws exists in the Android System component and allow remote attackers to execute arbitrary code. The two critical vulnerabilities are part of Google’s January Android security bulletin, released Monday. The...

Google Android Information Disclosure Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS There is an information disclosure vulnerability, the vulnerability stems from the network system or product in the operation process there are configuration and other...

Google Android Information Disclosure Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS There is an information disclosure vulnerability, the vulnerability stems from the network system or product in the operation process there are configuration and other...

Microsoft Excel spreadsheet editors Code Execution

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises, is related to the use of after-release components. Exploitation of this vulnerability can allow attackers to access protected...

Security Bulletin: Rational Synergy can be affected by a vulnerabilities in JSSE components (CVE-2013-0440, CVE-2013-0443, CVE-2013-1571, CVE-2013-0169)

Summary IBM Rational Synergy can be affected by the following vulnerabilities which exist in the IBM Java SDK that is shipped with IBM Rational Synergy. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more...

Logrhythm Platform Manager Access Control Error Vulnerability

Logrhythm Platform Manager is a component of the Logrhythm application from Logrhythm USA. The component is responsible for centralized management of alerts, notifications and case and security event management. Supports real-time dashboards, SmartResponse operations and reports. An Access Contro...

[R1] Tenable.sc 5.17.0 Fixes Multiple Vulnerabilities

Tenable.sc leverages third-party software to help provide underlying functionality. Two separate third-party components jQuery and OpenSSL were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with good practice, Tenable...

camel: server-side template injection and arbitrary file disclosure on templating components

A flaw was found in camel. Camel's templating components are suseptable to Server-Side Template Injection and arbitrary file disclosure. The highest threat from this vulnerability is to data confidentiality...