9573 matches found
Oracle Coherence (Apr 2021 CPU)
The version of the Oracle Coherence installed on the remote host is missing a critical patch update. It is, therefore, affected by a vulnerability, as referenced in the April 2021 CPU advisory. - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core...
Oracle WebCenter Portal Multiple Vulnerabilities (Apr 2021 CPU)
The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the January 2021 Critical Patch Update CPU. It is, therefore, affected by the following vulnerabilities: - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware componen...
Oracle Fusion Middleware Input Validation Error Vulnerability (CNVD-2021-33844)
Oracle HTTP Server is the web server component of Oracle Fusion Middleware. A security vulnerability exists in the Web Listener component in Oracle HTTP Server versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. An attacker could exploit this vulnerability to compromise Oracle HTTP Server by allowin...
Vulnerabilities fixed in Oracle Fusion Middleware
Vulnerabilities have been fixed in Oracle Fusion Middleware. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data...
Unspecified Vulnerability in Oracle Enterprise Manager for Fusion Middleware (CNVD-2021-30937)
Oracle Enterprise Manager for Fusion Middleware is Oracle's on-premise management platform for Fusion Middleware. A security vulnerability exists in the FMW Control Plugin component in Oracle Enterprise Manager for Fusion Middleware version 12.2.1.4. An attacker could exploit this vulnerability t...
Unspecified Vulnerability in Oracle Enterprise Manager for Fusion Middleware
Oracle Enterprise Manager for Fusion Middleware is Oracle's on-premise management platform for Fusion Middleware. A security vulnerability exists in the FMW Control Plugin component in Oracle Enterprise Manager for Fusion Middleware version 13.4.0.0. An attacker could exploit this vulnerability t...
Oracle Fusion Middleware Input Validation Error Vulnerability (CNVD-2021-33848)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters...
Oracle Fusion Middleware Input Validation Error Vulnerability
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters...
Oracle Enterprise Manager for Fusion Middleware 安全漏洞
Oracle Enterprise Manager for Fusion Middleware is Oracle's on-premise management platform for Fusion Middleware. A security vulnerability exists in the FMW Control Plugin component in Oracle Enterprise Manager for Fusion Middleware version 13.4.0.0. An attacker could exploit this vulnerability t...
Oracle Enterprise Manager for Fusion Middleware 安全漏洞
Oracle Enterprise Manager for Fusion Middleware is Oracle's on-premise management platform for Fusion Middleware. A security vulnerability exists in the FMW Control Plugin component in Oracle Enterprise Manager for Fusion Middleware version 12.2.1.4. An attacker could exploit this vulnerability t...
Oracle Fusion Middleware 输入验证错误漏洞
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters...
Oracle Fusion Middleware 输入验证错误漏洞
Oracle HTTP Server is the web server component of Oracle Fusion Middleware. A security vulnerability exists in the Web Listener component in Oracle HTTP Server versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. An attacker could exploit this vulnerability to compromise Oracle HTTP Server by allowin...
Oracle Fusion Middleware 输入验证错误漏洞
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters...
Oracle Fusion Middleware 输入验证错误漏洞
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. Oracle Fusion Middleware Oracle Platform Security for Java OPSS...
GO-2020-0001 Arbitrary log line injection in github.com/gin-gonic/gin
The default Formatter for the Logger middleware LoggerConfig.Formatter, which is included in the Default engine, allows attackers to inject arbitrary log entries by manipulating the request path...
Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP7 security update
Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 7 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
No Auth, Seamless Database Security and Compliance
As data breaches continue to target databases and attack techniques become more sophisticated over time, organizations are looking for dynamic and efficient ways to effectively monitor the compliance posture of the databases in their hybrid environments. They have traditionally used privileged...
GHSA-35MM-CC6R-8FJP Cross-site scripting in actionpack
In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...
Cross-site scripting in actionpack
In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...
