CVE-2023-24524

SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to delete the data with a high impact to availability...

CVE-2023-24524

CVE-2023-24524 affects SAP S/4HANA Map Treasury Correspondence Format Data. The accompanying documents describe an missing authorization check for authenticated users, enabling privilege escalation and potential data deletion with high availability impact. The core issue is an authorization gap i...

Dell PowerScale OneFS Command Injection Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a command injection vulnerability that can be exploited by attackers to cause arbitrary command execution, denial of service, information disclosure, and data deletion...

NVIDIA GeForce Experience < 3.27.0.112 Multiple Vulnerabilities

The version of NVIDIA GeForce Experience installed on the remote host is prior to 3.24.0.126. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked...

NVIDIA GeForce Experience 后置链接漏洞

NVIDIA GeForce Experience is a set of automatic update tools for graphics cards from NVIDIA Corporation in the United States. The product is capable of automatically updating graphics card drivers and supports graphics card performance management and optimization, among other things. ecto is an...

CVE-2022-45095

Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having the privilege to gather logs from the cluster could potentially exploit this vulnerability, leading to execute arbitrary commands, denial of service, informati...

CVE-2022-45095

Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having the privilege to gather logs from the cluster could potentially exploit this vulnerability, leading to execute arbitrary commands, denial of service, informati...

Command injection

Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having the privilege to gather logs from the cluster could potentially exploit this vulnerability, leading to execute arbitrary commands, denial of service, informati...

CVE-2022-45095

Dell PowerScale OneFS (versions 8.2.x–9.4.x) contains a command-injection vulnerability where an authenticated user with local shell access and the ability to gather logs could execute arbitrary commands, potentially causing DoS, information disclosure, and data deletion. Root cause cited in mult...

CVE-2022-45095

Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having the privilege to gather logs from the cluster could potentially exploit this vulnerability, leading to execute arbitrary commands, denial of service, informati...

CVE-2022-45095

Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having the privilege to gather logs from the cluster could potentially exploit this vulnerability, leading to execute arbitrary commands, denial of service, informati...

Dell PowerScale OneFS 命令注入漏洞

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a command injection vulnerability that can be exploited by attackers to cause arbitrary command execution, denial of service, information disclosure, and data deletion...

Vulnerability of the Server component: The MySQL Server database management system’s Optimizer component allows a hacker to gain unauthorized access to read, modify, or delete data.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data...

The vulnerability of the Pocket Outlook Sync (PocketPC) component of the Oracle Sales for Handhelds module in the Oracle E-Business Suite allows a perpetrator to access, modify, add, or delete protected data.

The vulnerability of the Pocket Outlook Sync PocketPC component of the Oracle Sales for Handhelds component in the Oracle E-Business Suite automation system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to modify, add, ...

Vulnerability of the MySQL Server component: The Optimizer component of the MySQL database management system allows a hacker to gain unauthorized access to read, modify, or delete data, or to cause service interruptions.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or to cause service interruptions...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle E-Business...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle E-Business...

Oracle PeopleSoft Enterprise PeopleTools 安全漏洞

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for providing PeopleSoft applications with the ability to stay in sync with users' needs and expectations. A security vulnerability in Oracle PeopleSoft's PeopleSoft Enterprise PeopleTools 8.60 can be exploited by an attacker to caus...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle E-Business...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Application...