19536 matches found
Oracle Java SE permission licensing and access control issues
In Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products, there are vulnerabilities related to permission management and access control. These vulnerabilities exist in Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions;...
Oracle Business Intelligence Enterprise Edition security vulnerabilities
Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Search component, which may allow attackers with low privileges to gain control of Oracle Business Intelligence...
Oracle Business Intelligence Enterprise Edition security vulnerabilities
Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0, 12.2.1.4.0.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Web General component. Unauthorized attackers may gain access via the HTTP network, causing the service to han...
Oracle Java SE security vulnerabilities
Security vulnerabilities exist in Oracle Java SE versions 8u503 and 8u503-perf, as well as Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues within the CORBA component, potentially allowing unauthenticated attackers to gain network access via various...
Oracle Business Intelligence Enterprise Edition security vulnerabilities
Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the Analytics Server component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...
Oracle Business Intelligence Enterprise Edition security vulnerabilities
Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 12.2.1.4.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Search component. Unauthenticated attackers can access the system via the HTTP network, and require interaction from non-attacker...
CVE-2026-112161
MobaXterm Personal Edition Portable 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it with a malicious library. When the victim opens a Local Shell...
EUVD-2026-104122
MobaXterm Personal Edition Portable 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it with a malicious library. When the victim opens a Local Shell...
CVE-2026-112161 Lack of integrity checks in Mobatek’s MobaXterm
MobaXterm Personal Edition Portable 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it with a malicious library. When the victim opens a Local Shell...
CVE-2026-112161 Lack of integrity checks in Mobatek’s MobaXterm
MobaXterm Personal Edition Portable 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it with a malicious library. When the victim opens a Local Shell...
CVE-2026-112161
MobaXterm Personal Edition (Portable) 26.4 GA is vulnerable to a local code execution flaw due to a lack of integrity checks when extracting the CygUtils64.plugin file. An attacker with local write permissions can replace the bin/cygwin1.dll library within that plugin with a malicious version. Wh...
Multiple vulnerabilities in IBM Java SDK affect AIX
IBM SECURITY ADVISORY First Issued: Mon Oct 19 04:45:00 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/javaoct2026advisory.asc Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX...
Microsoft SharePoint Server Subscription Edition Spear Phishing
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks...
Microsoft SharePoint Server Privilege Escalation
The vulnerability of the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
Microsoft SharePoint Server Privilege Escalation
The vulnerability of the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
Microsoft SharePoint Server Auth Bypass Info Disclosure
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...
Microsoft SharePoint Server Subscription Edition Spear Phishing
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks...
Microsoft SharePoint Server Privilege Escalation
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Microsoft SharePoint Server Privilege Escalation
The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to improper code generation. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
CVE-2026-112161: Insufficient Verification of Data Authenticity
MobaXterm Personal Edition Portable 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it with a malicious library. When the victim opens a Local Shell...