UBUNTU-CVE-2024-21247

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2024-21282

The CVE applies to Oracle E-Business Suite, specifically the Common Components used by Oracle Financials. Affected versions are 12.2.3–12.2.13. The root cause is a vulnerability in the authorization mechanism in Oracle Financials that can be exploited by a low-privileged attacker over HTTP to per...

Oracle Application Express 安全漏洞

Oracle Application Express is a low-code development platform from Oracle Corporation USA. A security vulnerability exists in Oracle Application Express versions 23.2 and 24.1. An attacker could exploit the vulnerability to update, insert, or delete accessible data...

VulnCheck KEV: CVE-2023-7288

The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the updateprofilepreference function in versions up to, and including, 4.3.7. This makes it possible for authenticated attackers with...

Oracle Virtualization 安全漏洞

Oracle Virtualization is a suite of virtualization solutions from Oracle Corporation USA. The product is used to unify the management of the entire hardware and software architecture from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of th...

Oracle MySQL 安全漏洞

Oracle MySQL Cluster is the United States Oracle Oracle company developed a write scalable, real-time, ACID-compatible transactional database. A security vulnerability exists in Oracle MySQL Cluster, which can be exploited by an attacker to update, insert, or delete accessible data...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management, and other functions. A security vulnerability exists in Oracle Quoting versions 12.2.7 throug...

Oracle Applications Manager 安全漏洞

Oracle Applications Manager is an application management software from Oracle Corporation USA. The software provides monitoring, trending, and fault management for Oracle data files. A security vulnerability exists in Oracle Applications Manager versions 12.2.11 through 12.2.13. An attacker could...

SolarWinds Web Help Desk Hardcoded Credential Vulnerability

SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data...

PT-2024-7012 · Oracle · Oracle Advanced Pricing

Name of the Vulnerable Software and Affected Versions: Oracle Advanced Pricing component: Price List versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient authorization procedure due to incorrect input validation in the Price List component of Oracle Advanced Pricing,...

Oracle PeopleSoft Enterprise HCM Global Payroll 安全漏洞

Oracle PeopleSoft Enterprise HCM Global Payroll is a rules-based payroll calculation solution from Oracle Corporation Oracle. A security vulnerability exists in Oracle PeopleSoft Enterprise HCM Global Payroll versions 9.2.48 through 9.2.50. An attacker could exploit the vulnerability to create,...

VulnCheck KEV: CVE-2024-28987

SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management, and other functions. A security vulnerability exists in Oracle Product Hub versions 12.2.3...

Oracle PeopleSoft Enterprise CC Common Application Objects 安全漏洞

Oracle PeopleSoft Enterprise CC Common Application Objects is a Common Application Objects component from Oracle Corporation USA. A security vulnerability exists in Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2. An attacker could exploit the vulnerability to update, inser...

PT-2024-7089 · Oracle · Oracle Enterprise Manager Fusion Middleware Control

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Manager Fusion Middleware Control version 12.2.1.4.0 Description: The issue is related to insufficient input validation in the FMW Control Plugin component of Oracle Enterprise Manager Fusion Middleware Control, allowing a...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation USA. The product includes core banking, online banking, and property management. A security vulnerability exists in Oracle Banking Liquidity Management version 14.7.0.6.0 of Oracle Financial...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management, and other functions. A security vulnerability exists in Oracle Site Hub versions 12.2.3 throu...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Field Service versions 12.2.3...

NewType WebEIP SQL注入漏洞

NewType WebEIP is an enterprise team management solution from NewType, a Chinese company. A SQL injection vulnerability exists in NewType WebEIP version 3.0 that originates from failure to properly validate user input, allowing remote attackers with regular privileges to inject SQL commands to...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Common Application...