EUVD-2011-2235

Malware in sbrugna...

EUVD-2024-18995

Malicious code in bioql PyPI...

EUVD-2024-18866

Malicious code in bioql PyPI...

CVE-2024-28734

Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted GET request using the cols parameter...

CVE-2024-28735

Unit4 Financials by Coda versions prior to 2023Q4 suffer from an incorrect access control authorization bypass vulnerability which allows an authenticated user to modify the password of any user of the application via a crafted request...

CVE-2021-2363

Vulnerability in the Oracle Public Sector Financials International product of Oracle E-Business Suite component: Authorization. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Malicious code in @financials/ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4e926cb5ead89764d2bf06ee99599588691f94bf8e2bc5976cb73d5aa722bf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @financials/using-dep-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57594d4888118b288663b3c166cd3cefb4f30e8aebc4e4bed2f92a51945a33bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Oracle E-Business Suite (October 2024 CPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory. - Vulnerability in the Oracle Financials product of Oracle E-Business Suite component: Common Components. Supported versions that are...

The vulnerability of the Common Components component of the Oracle Financials financial management platform, which allows a malicious actor to gain unauthorized access to create, modify, and delete data.

The vulnerability of the Common Components component of the Oracle Financials financial management platform, part of the Oracle E-Business Suite, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

CVE-2024-21282

Vulnerability in the Oracle Financials product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials. Successful...

CVE-2024-21282

Vulnerability in the Oracle Financials product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials. Successful...

CVE-2024-21282

The CVE applies to Oracle E-Business Suite, specifically the Common Components used by Oracle Financials. Affected versions are 12.2.3–12.2.13. The root cause is a vulnerability in the authorization mechanism in Oracle Financials that can be exploited by a low-privileged attacker over HTTP to per...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Financials version...

Oracle E-Business Suite (July 2024 CPU)

The versions of Oracle E-Business Suite installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory. - Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are...

CVE-2024-21152

Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite component: Allocation Rules. Supported versions that are affected are 12.2.12-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2024-21152

Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite component: Allocation Rules. Supported versions that are affected are 12.2.12-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2024-21152

CVE-2024-21152 affects Oracle E-Business Suite, specifically the Allocation Rules component in Oracle Process Manufacturing Financials. Affected versions are 12.2.12–12.2.13. The issue allows a low-privileged, HTTP-network attacker to compromise data integrity and confidentiality, enabling unauth...

VulnCheck KEV: CVE-2024-28734

Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted GET request using the cols parameter...

CVE-2024-28735

Unit4 Financials by Coda versions prior to 2023Q4 suffer from an incorrect access control authorization bypass vulnerability which allows an authenticated user to modify the password of any user of the application via a crafted request...