625 matches found
The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server allows a attacker to gain full control over the application.
The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application through the IIOP and T3 network protocols...
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Work Provider Administration component of the application, which is responsible for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks, allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Work Provider Administration component of the application, which is responsible for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks, is related to deficiencies in access control. Exploiting this vulnerability could allow an...
The vulnerability of the “Estimate and Actual Charges” component of the Oracle Depot Repair automation software allows a intruder to gain unauthorized access to protected information.
The vulnerability of the “Estimate and Actual Charges” component of the Oracle Depot Repair automation software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through the...
The vulnerability of the Microsoft Windows Update Client application on Windows operating systems allows a malicious individual to escalate their privileges.
The vulnerability of the Microsoft Windows Update Client application for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to compromise the integrity of the protected information.
The vulnerability of the Moodle virtual training environment is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the protected information...
The vulnerability of the input system for writing multiple languages in Unix-like operating systems, such as ibus, allows a intruder to gain unauthorized access to information and compromise its integrity.
The vulnerability of the input system for writing multiple languages in Unix-like operating systems, such as ibus, is related to the lack of authentication when the DBus server is configured incorrectly. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to...
The vulnerability of the RADIUS server FreeRADIUS, related to insufficient verification of data authenticity, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the RADIUS-server FreeRADIUS is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CyberSolutions CyberMail Cross-Site Scripting Vulnerability
CyberSolutions CyberMail is an e-mail system from CyberSolutions Japan. A cross-site scripting vulnerability exists in the 'ACTION' parameter of cgi-bin/go in Cyber??Solutions Cyber??Mail 5 and later versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB...
The vulnerability of the web interface of Siemens SINEMA Remote Connect allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Siemens SINEMA Remote Connect web interface is related to the lack of measures taken to encrypt sensitive data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Intel Converged Security and Manageability Engine’s microprogramming software, related to authentication deficiencies, allows attackers to escalate their privileges, cause service failures, or disclose sensitive information.
The vulnerability of Intel Converged Security and Manageability Engine CSME is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or expose sensitive information...
The vulnerability of the built-in software in Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards is related to lack of access control, allowing attackers to increase their privileges.
The vulnerability of the built-in software in Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Intel Graphics Driver drivers, related to access control deficiencies, allows attackers to trigger a service failure.
The vulnerability of Intel Graphics Drivers’ drivers is related to access control deficiencies. Exploiting this vulnerability can allow a hacker to cause a service failure...
The vulnerability of the SAP NetWeaver software integration platform, caused by deficiencies in the authentication process, allows attackers to increase their privileges.
The vulnerability of the SAP NetWeaver software integration platform is due to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
The vulnerability of SAP BusinessObjects Business Intelligence platform arises from deficiencies in the encryption of user-input data. This allows attackers to execute cross-site scripting attacks (XSS).
The vulnerability of the SAP BusinessObjects Business Intelligence platform exists due to deficiencies in the encryption of data entered by users. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the Extensibility Framework component of the Enterprise Manager Base Platform allows a perpetrator to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.
The vulnerability of the Extensibility Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...
The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform allows a malicious individual to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.
The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...
The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform allows a malicious individual to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.
The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...
The vulnerability of the Attachments/File Upload component in the Oracle Applications Framework allows a perpetrator to gain unauthorized access to modify, add, or delete data.
The vulnerability of the Attachments/File Upload component in the Oracle Applications Framework is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to modify, add, or delete data using the HTTPS...