CVE-2026-0508

The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within the application. Upon successful exploitation, the victim may click on this malicious URL, resulting in an unvalidated redirect to the attacker-controlled...

PT-2026-7313

Name of the Vulnerable Software and Affected Versions Intel Quick Assist Technology affected versions not specified Description A missing protection mechanism for an alternate hardware interface within Ring 0 may allow an escalation of privilege. A system software adversary with privileged user...

EUVD-2012-0528

Malware in sbrugna...

EUVD-2012-0556

Malware in sbrugna...

PT-2025-36376

Name of the Vulnerable Software and Affected Versions: ASP affected versions not specified Description: Improper handling of insufficient privileges in the ASP could allow a privileged attacker to modify Translation Map Registers TMRs, potentially resulting in loss of confidentiality or integrity...

CVE-2025-54655

Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality and integrity of the virtualization graphics module...

BIT-SUPERSET-2023-39265 Apache Superset: Possible Unauthorized Registration of SQLite Database Connections

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is usin...

The vulnerability of the SAP NetWeaver AS Java software integration platform lies in the absence of authentication procedures, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of SAP NetWeaver AS Java software-based integration platforms is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to remotely compromise the confidentiality and integrity of the protected information...

CVE-2024-6674 Data Leak through CORS Misconfiguration in parisneo/lollms-webui

A CORS misconfiguration in parisneo/lollms-webui prior to version 10 allows attackers to steal sensitive information such as logs, browser sessions, and settings containing private API keys from other services. This vulnerability can also enable attackers to perform actions on behalf of a user,...

CVE-2024-30207

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

Oracle FLEXCUBE Direct Banking安全漏洞

An unspecified vulnerability exists in the Loans And Deposits component of Oracle FLEXCUBE Universal Banking, a real-time, online, comprehensive global core banking solution that covers retail, corporate, and investment banking. An attacker could exploit this vulnerability to compromise...

DEBIAN-CVE-2021-20179

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity...

CVE-2021-3156

A flaw was found in sudo. A heap-based buffer overflow was found in the way sudo parses command line arguments. This flaw is exploitable by any local user who can execute the sudo command by default, any local user can execute sudo without authentication. Successful exploitation of this flaw coul...

Unauthorized Access Vulnerability in Oracle BI Publisher (CNVD-2020-41110)

Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage and deliver all reports and documents. A security vulnerability exists in the Mobile Service component in Oracle BI Publisher 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. An...

Oracle Hospitality Reporting and Analytics Unauthorized Access Vulnerability

Oracle Hospitality Reporting and Analytics is a web-based application. A security vulnerability exists in Oracle Hospitality Reporting and Analytics 9.1.0. An attacker could exploit the vulnerability to compromise confidentiality and integrity...

Authorization Bypass

openjdk is vulnerable to authorization bypass. An unspecified vulnerability allows remote attackers to affect confidentiality and integrity via vectors related to Swing...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-24096)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

CVE-2018-2792

Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite subcomponent: Ipmitool. The supported version that is affected is Prior to 2.4.3. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

Unspecified Vulnerability in Oracle Sun Systems Products Suite (CNVD-2018-02522)

Oracle Sun Systems Products Suite is a Sun Systems product package. An unspecified vulnerability exists in the SPARC Platform subcomponent of the Solaris component of Oracle Sun Systems Products Suite. An attacker could exploit this vulnerability to compromise confidentiality and integrity...

CVE-2017-12276

A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. Th...