3028 matches found
WordPress Podlove Podcast Publisher Plugin <= 4.0.14 is vulnerable to Broken Access Control
Software Podlove Podcast Publisher Type Plugin Vulnerable versions = 4.0.14 Fixed in 4.0.15 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32712 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 03f3d1e3ccd2 Credits LVT-tholv2k...
Oracle Business Intelligence Publisher (April 2024 CPU)
The versions of Oracle Business Intelligence Publisher installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2024 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: XML Services. Supported versions that are...
Podlove Podcast Publisher < 4.0.14 - Authenticated (Contributor+) SQL Injection
Description The Podlove Podcast Publisher plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 4.0.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...
Libsyn Publisher Hub <= 1.4.4 - Cross-Site Request Forgery
Description The Libsyn Publisher Hub plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.4. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknow...
Podlove Podcast Publisher < 4.1.1 - Missing Authorization
Description The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions such as dorepair in versions up to, and including, 4.1.0. This makes it possible for authenticated attackers, with subscriber-level access and...
Libsyn Publisher Hub <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Description The Libsyn Publisher Hub plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, t...
CVE-2024-21084
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Service Gateway. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Whil...
CVE-2024-21084
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Service Gateway. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Whil...
CVE-2024-21082
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: XML Services. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher...
CVE-2024-21082
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: XML Services. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher...
CVE-2024-21083
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Script Engine. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle BI Publisher...
CVE-2024-21083
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Script Engine. Supported versions that are affected are 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle BI Publisher...
CVE-2024-21084
CVE-2024-21084 affects Oracle BI Publisher (Oracle Analytics) in the Service Gateway component for versions 7.0.0.0.0 and 12.2.1.4.0. An unauthenticated attacker with network access via HTTP can read data from Oracle BI Publisher; attacks may impact related products (scope change). The descriptio...
CVE-2024-21082
CVE-2024-21082 affects Oracle BI Publisher (Oracle Analytics), specifically the XML Services component. Affected versions are 7.0.0.0.0 and 12.2.1.4.0. The root cause is insufficient input validation in XML Services, enabling an unauthenticated attacker with network access via HTTP to compromise ...
CVE-2024-21083
CVE-2024-21083 affects Oracle Analytics, Oracle BI Publisher, Script Engine component. Affected versions: 7.0.0.0.0 and 12.2.1.4.0. The vulnerability allows a high-privilege attacker with network access over HTTP to compromise Oracle BI Publisher, potentially taking over the product. Sources cons...
Oracle BI Publisher 安全漏洞
Oracle BI Publisher is a reporting solution from Oracle Corporation USA that makes it easier and faster to create, manage and deliver all reports and documents than traditional reporting tools. A security vulnerability exists in Oracle BI Publisher for Oracle Analytics. An attacker has exploited...
Oracle BI Publisher 安全漏洞
Oracle BI Publisher is a reporting solution from Oracle Corporation USA that makes it easier and faster to create, manage and deliver all reports and documents than traditional reporting tools. A security vulnerability exists in Oracle BI Publisher for Oracle Analytics. An attacker has exploited...
PT-2024-4899 · Oracle · Oracle Bi Publisher
Name of the Vulnerable Software and Affected Versions: Oracle BI Publisher versions 7.0.0.0.0 and 12.2.1.4.0 Description: The issue is related to insufficient access control in the Service Gateway component of Oracle BI Publisher, allowing an unauthenticated attacker with network access via HTTP ...
PT-2024-3131 · Oracle · Oracle Bi Publisher
Name of the Vulnerable Software and Affected Versions: Oracle BI Publisher versions 7.0.0.0.0 and 12.2.1.4.0 Description: The issue is related to insufficient input validation in the XML Services component of Oracle BI Publisher, allowing an unauthenticated attacker with network access via HTTP t...