Dolibarr 授权问题漏洞

Dolibarr is a software application. A modern software package to help manage your organization's activities. A security vulnerability exists in Dolibarr versions v2.8.1 through v13.0.2 that allows a low-privileged attacker to reset the password of any user in the affected application using the...

Dolibarr Cross-Site Scripting Vulnerability (CNVD-2021-71264)

Dolibarr is an application. A modern software package that helps manage your organization's activities, Dolibarr ERP CRM versions 2.8.1 through 13.0.2 are vulnerable to a cross-site scripting vulnerability caused by a lack of validation of user-submitted data by the editor module in the software...

CVE-2021-38136

Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snapfile parameter in the /it-IT/splunkd/raw/services/getsnapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host...

MB connect line mbDIALUP 输入验证错误漏洞

MB connect line mbDIALUP is an application from MB connect line. Developed by MB Connect Line GmbH for use by a Software Informer user. An input validation error vulnerability exists in MB connect line mbDIALUP, which originates in MB connect line mbDIALUP version = 3.9R0.0, and can be exploited ...

CVE-2020-26180

Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account. A remote malicious user with low privileges may gain access to data stored on the /ifs directory through most protocols...

CVE-2021-2393

Vulnerability in the Oracle E-Records product of Oracle E-Business Suite component: E-signatures. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Records...

CVE-2021-2360

Vulnerability in the Oracle Approvals Management product of Oracle E-Business Suite component: AME Page rendering. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Approvals...

Oracle Hospitality Reporting and Analytics has an unspecified vulnerability (CNVD-2021-56433)

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insight into business operations, and improves efficiency by delivering information to all roles within the organization. and Analytics version 9.1.0...

Oracle Hospitality Reporting and Analytics输入验证错误漏洞

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insight into business operations, and improves efficiency by delivering information to all roles within the organization. and Analytics version 9.1.0...

CVE-2021-2311

Vulnerability in the Oracle Hospitality Inventory Management product of Oracle Food and Beverage Applications component: Export to Reporting and Analytics. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...

CVE-2021-2167

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2021-2231

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: APIs. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of...

CVE-2021-2167

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

Oracle ZFS Storage Appliance 安全漏洞

Oracle ZFS Storage Appliance is a storage appliance from Oracle Corporation of America that supports flash memory, petabytes of file storage and has a built-in Oracle database. A security vulnerability exists in Oracle ZFS Storage Appliance Kit Core 8.8 that could allow a low-privileged attacker ...

Oracle Bills of Material 安全漏洞

Oracle Bills of Material is an application from Oracle Corporation, USA. It provides all the knowledge needed to define and use bills of material. A security vulnerability in Oracle Bills of Material Bill Issues 12.1.1-12.1.3 in Oracle E-Business Suite allows a low-privileged attacker with networ...

Oracle Quoting 安全漏洞

Oracle Quoting is an application from Oracle Corporation, USA. An automated sales quote generation application that creates and manages customer quotes easily, consistently, and securely across all customer interaction channels, such as field sales, telesales, e-commerce, and business partners. A...

Oracle PeopleSoft Enterprise CS Campus Community Frameworks 安全漏洞

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Oracle. The products provide human capital management, financial management, supplier relationship management, and other capabilities. A security vulnerability exists in PeopleSoft Enterprise CS Campu...

CVE-2021-28821

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local acce...

Tibco Software TIBCO Software FTL 安全漏洞

Tibco Software TIBCO Software FTL is an application-to-application messaging system from TIBCO Software USA. A security vulnerability exists in TIBCO Software FTL, which can be exploited by a low-privileged attacker to insert malware...

CVE-2021-2044

Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft component: Financial Sanctions. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN...