Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2021-07527)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.18. An attacker could exploit the vulnerability to affect the integrity...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-08454)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Customer...

Oracle E-Business Suite Authorization Issues Vulnerability (CNVD-2021-08447)

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iStore is one of the business can effectively build,...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-08463)

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Corporation. The software provides customer relationship management, service management, financial management, etc. Common Applications also known as Oracle Common Application...

Unspecified Vulnerability in Oracle Financial Services Revenue Management and Billing

Oracle Financial Services Revenue Management and Billing ORMB provides a superior rules-based system for billing, payment and collections that increases revenue opportunities, reduces costs, improves customer service and provides sales channel support. An unspecified vulnerability exists in the O...

Oracle E-Business Suite Authorization Issues Vulnerability (CNVD-2021-08449)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in the Oracle iStore...

Oracle Database Server Access Control Error Vulnerability (CNVD-2021-08528)

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in the Unified Audit component of Oracle Database Serve...

Oracle Database Server 授权问题漏洞

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in the Java VM component of Oracle Database Server. An...

The vulnerability of the nsm DropPrivileges function (from the support/nsm.File.c module in the NFS utilities nfs-utils package) arises from improper assignment of standard privileges. This allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the nsm DropPrivileges function from the NFS utility package nfs-utils, file.c section is related to the improper assignment of standard privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data, compromise its...

The vulnerability of Firefox browser relates to the issue of allowing operations to exceed the permissible data buffer limits. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox browser is related to the execution of operations that exceed the allowable data buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the VideoBroadcaster module in the Firefox browser’s AddOrUpdateSink function allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the VideoBroadcaster module in the Firefox browser’s AddOrUpdateSink function is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the PostgreSQL database management system, related to an unreliable search path, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PostgreSQL database management system is related to an unreliable search path mechanism. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the Firefox, Firefox ESR, and Thunderbird software lies in the use of memory after it is freed. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerabilities of the Firefox, Firefox ESR, and Thunderbird software are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Arbitrary File Deletion Vulnerability in Jinwei Mobile Mall (CNVD-2021-03384)

The business scope of Hubei Tao code thousand dimensional information science and technology limited company includes: computer software design, development, sales, technical services; system integration and so on. There is an arbitrary file deletion vulnerability in Jinwei Mobile Mall, which can...

File Deletion Vulnerability in MetInfo

MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has a file deletion vulnerability that can be exploited by attackers to compromise integrity...

CVE-2019-4349: Exposure of Sensitive Information to an Unauthorized Actor

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating system version that could compromised the confidentiality and integrity of the service. IBM X-Force ID: 161486...

CVE-2020-6302

CVE-2020-6302 affects SAP Commerce versions 6.7, 1808, 1811, 1905 and 2005. The backoffice URL exposes the jSession ID on initial load, enabling session fixation with potential access to admin accounts and full compromise of confidentiality, integrity, and availability. Red Hat notes the same CVE...

Vulnerabilities in the initialization and service management of Linux Systemd, related to incorrect default permissions, allow attackers to access confidential data, compromise its integrity, and cause service failures.

Vulnerabilities in the initialization and service management of Linux’s systemd are related to incorrect standard permissions for low-security administrators. Exploiting these vulnerabilities can allow remote attackers to access sensitive data, compromise its integrity, and cause service failures...

The vulnerability in the implementation of the grub_script_function_create() function of the Grub2 operating system allows a perpetrator to gain access to confidential data, affect the integrity of the data, and cause service failures.

The vulnerability of the grubscriptfunctioncreate function, which is part of the Grub2 operating system loader, stems from an error in function overriding. This function is already being executed. Exploiting this vulnerability could allow a perpetrator to access confidential data, compromise data...

The vulnerability of the awl library set, related to session management errors, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the awl library set is related to session management errors. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...