PT-2021-7134

Name of the Vulnerable Software and Affected Versions Oracle Secure Global Desktop version 5.6 Description The issue exists due to insufficient input validation in the Client component of Oracle Secure Global Desktop. This allows a remote attacker to gain full control over the application via the...

Command injection

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device...

CVE-2021-33534: Improper Neutralization of Special Elements used in an OS Command

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device...

PT-2021-20181

Name of the Vulnerable Software and Affected Versions Weidmueller Industrial WLAN devices affected versions not specified Description A command injection issue exists in the hostname functionality of the affected devices. This allows an attacker to execute arbitrary system commands by making a...

CVE-2021-33534

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain full control over the application...

CVE-2020-27383

Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the existing executable file with a binary of his choice. The vulnerability exist due to weak set of permissions being granted to the "Authenticat...

Privilege escalation

Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the existing executable file with a binary of his choice. The vulnerability exist due to weak set of permissions being granted to the "Authenticat...

Privilege escalation

The Gw2-64.exe in Guild Wars 2 launcher version 106916 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the existing executable file with a binary of his choice. The vulnerability exist due to the improper permissions, with the 'F' flag...

Battle.Net 安全漏洞

Battle.Net is Blizzard's multiplayer online gaming service for its games. Battle.Net suffers from a security vulnerability that stems from a weak permission setting granted to the "Authenticated Users Group" the authorization F flag aka "Full Control"...

PT-2021-11389

Name of the Vulnerable Software and Affected Versions: Battle.Net version 1.27.1.12428 Description: The issue arises from a weak set of permissions granted to the Authenticated Users Group, which allows an authenticated user to modify the existing executable file with a binary of their choice,...

CVE-2020-27383: Improper Preservation of Permissions

Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the existing executable file with a binary of his choice. The vulnerability exist due to weak set of permissions being granted to the "Authenticat...

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a hacker to gain full control over the application.

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP protocol...

The vulnerability of the SQR component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain full control over the application.

The vulnerability of the SQR component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application using the HTTP protocol...

The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of Oracle Marketing’s Marketing Administration component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to gain full control over the application using the HTTP protocol...

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software allows a hacker to execute arbitrary code or gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain full control over the application...

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software allows a hacker to execute arbitrary code or gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain full control over the application...

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...