Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Oracle Database Server's Unified Audit. An attacker exploiting th...

PT-2024-3442 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of the Oracle Complex Maintenance, Repair, and Overhaul product. This allows an unauthenticated...

PT-2024-4895 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul, allowing an...

Oracle Supply Chain Products Suite 安全漏洞

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle Corporation USA. The product provides value chain planning, value chain execution, and product lifecycle management. A security vulnerability exists in Oracle Supply Chain's Oracle Agile Product Lifecycle Manageme...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Concurrent...

Oracle Virtualization 安全漏洞

Oracle Virtualization and Oracle VM VirtualBox are both products of Oracle Corporation.Oracle Virtualization is a suite of virtualization solutions. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the...

PT-2024-4910 · Oracle · Oracle Outside In Technology

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.6 through 8.5.7 Description: The issue is related to insufficient input validation in the Outside In Core component of Oracle Outside In Technology, allowing a low-privileged attacker with logon to th...

Oracle BI Publisher 安全漏洞

Oracle BI Publisher is a reporting solution from Oracle Corporation USA that makes it easier and faster to create, manage and deliver all reports and documents than traditional reporting tools. A security vulnerability exists in Oracle BI Publisher for Oracle Analytics. An attacker could exploit...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle. A security vulnerability exists in Oracle Systems' Oracle Solaris. An attacker could exploit this vulnerability to gain access to data...

Oracle E-Business Suite 的 Oracle Trade Management 安全漏洞

Oracle E-Business Suite E-Business Suite and Oracle Trade Management are both products of Oracle Corporation.Oracle E-Business Suite is a fully integrated suite of global business management software. The software provides customer relationship management, service management, financial management...

Oracle MySQL 安全漏洞

Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability exists in Oracle MySQL for MySQL Server. An attacker could exploit the vulnerability to gain update, insert, or delete privileges to data...

PT-2024-3945 · Oracle +12 · Mysql Server +11

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: A difficult to exploit vulnerability in the MySQL Server product allows an unauthenticated attacker with logon to the infrastructure where MySQL Server...

PT-2024-3746 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue exists due to insufficient input validation in the LOV component of the Oracle Complex Maintenance, Repair, and Overhaul product, part of...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Applications...

Oracle E-Business Suite 的 Oracle Web Applications Desktop Integrator 安全漏洞

Oracle E-Business Suite E-Business Suite is a suite of fully integrated global business management software from Oracle Corporation. The software provides customer relationship management, service management, financial management, and other functions. A security vulnerability exists in Oracle Web...

PT-2024-4893 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue exists due to insufficient input validation in the LOV component of the Oracle Complex Maintenance, Repair, and Overhaul product, part of...

PT-2024-3725 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul, allowing an...

CVE-2024-28556

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...

CVE-2024-28557

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to update-admin.php...

CVE-2024-3774

aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration values lacks proper restrictions on a specific parameter, allowing attackers to modify this parameter to access certain sensitive system configuration values...