Oracle Database Server for Unix (Jan 2023 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2023 CPU advisory. - Vulnerability in the Oracle Database - Machine Learning for Python Python component of Oracle Database Server. The supported version that ...

Oracle Database Server for Windows (Jan 2023 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2023 CPU advisory. - Vulnerability in the Oracle Data Provider for .NET component of Oracle Database Server. Supported versions that are affected are 19c and...

PT-2023-18441 · Unknown · Conprosys Hmi System

Name of the Vulnerable Software and Affected Versions: CONPROSYS HMI System CHS versions 3.4.5 and earlier Description: The issue allows a remote unauthenticated attacker to bypass access restrictions and obtain the server certificate, including the private key of the product, due to an improper...

CVE-2015-10069

A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects the function iscardpinatsession/updatefailedattempts of the file machine.py. The manipulation leads to sql injection. The name of the patch is...

Sql injection

A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects the function iscardpinatsession/updatefailedattempts of the file machine.py. The manipulation leads to sql injection. The name of the patch is...

CVE-2015-10069 viakondratiuk cash-machine machine.py update_failed_attempts sql injection

A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects the function iscardpinatsession/updatefailedattempts of the file machine.py. The manipulation leads to sql injection. The name of the patch is...

CVE-2015-10069

CVE-2015-10069 affects the viakondratiuk cash-machine, specifically the function is_card_pin_at_session/update_failed_attempts in the file machine.py. The issue enables a SQL injection, as described in multiple sources. A patch named 62a6e24efdfa195b70d7df140d8287fdc38eb66d is recommended to fix ...

CVE-2015-10069 viakondratiuk cash-machine machine.py update_failed_attempts sql injection

A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects the function iscardpinatsession/updatefailedattempts of the file machine.py. The manipulation leads to sql injection. The name of the patch is...

CVE-2015-10069

A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects the function iscardpinatsession/updatefailedattempts of the file machine.py. The manipulation leads to sql injection. The name of the patch is...

CVE-2015-10069: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects the function iscardpinatsession/updatefailedattempts of the file machine.py. The manipulation leads to sql injection. The name of the patch is...

PT-2023-10248 · Unknown · Viakondratiuk Cash-Machine

Name of the Vulnerable Software and Affected Versions: viakondratiuk cash-machine affected versions not specified Description: A critical issue has been found in the viakondratiuk cash-machine, affecting the is card pin at session/update failed attempts function of the machine.py file. This issue...

CVE-2022-39429

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of...

Null pointer dereference

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service DoS attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4...

CVE-2023-0122

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service DoS attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4...

Microsoft Azure Services Flaws Could've Exposed Cloud Resources to Unauthorized Access

Four different Microsoft Azure services have been found vulnerable to server-side request forgery SSRF attacks that could be exploited to gain unauthorized access to cloud resources. The security issues, which were discovered by Orca between October 8, 2022 and December 2, 2022 in Azure API...

Microsoft Azure Services Flaws Could've Exposed Cloud Resources to Unauthorized Access

Four different Microsoft Azure services have been found vulnerable to server-side request forgery SSRF attacks that could be exploited to gain unauthorized access to cloud resources. The security issues, which were discovered by Orca between October 8, 2022 and December 2, 2022 in Azure API...

4 Places to Supercharge Your SOC with Automation

It's no secret that the job of SOC teams continues to become increasingly difficult. Increased volume and sophistication of attacks are plaguing under-resourced teams with false positives and analyst burnout. However, like many other industries, cybersecurity is now beginning to lean on and benef...

Speculative execution attacks in KVM VMX

...

DEBIAN-CVE-2023-22497

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

Design/Logic Flaw

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...