PT-2019-6121 · Nlnet +8 · Unbound +8

Name of the Vulnerable Software and Affected Versions: Unbound versions prior to 1.9.5 Description: The issue is related to an integer overflow in the sldns str2wire dname buf origin function of the Unbound DNS server. This could potentially allow a remote attacker to access confidential data,...

The vulnerability of the US Federal Specific sub-component of the PeopleSoft Enterprise HCM Human Resources package from Oracle PeopleSoft Products allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the US Federal Specific sub-component of the PeopleSoft Enterprise HCM Human Resources package from Oracle PeopleSoft Products is related to inadequate access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

CloudBees Jenkins Google Kubernetes Engine Plugin Permission Check Missing Vulnerability

CloudBees Jenkins is a set of Java-based development of continuous integration tools . CloudBees Jenkins Google Kubernetes Engine Plugin suffers from a security vulnerability that allows remote attackers to exploit the vulnerability by submitting a special request that can be used to obtain...

OpenJDK: Missing URL format validation (Networking, 8221518)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access v...

The vulnerability of the ComplexImage function (MagickCore/fourier.c) in the ImageMagick console-based graphics editor allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ComplexImage function in the ImageMagick console-based graphics editor MagickCore/fourier.c is related to the execution of operations beyond the buffer’s boundaries. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its...

The vulnerability of the “World Judges” software suite lies in the lack of protection for the SQL query structure, allowing attackers to access database content by manipulating GET queries.

The vulnerability of the “World Judges” software suite is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to manipulate the GET request parameters and thereby access the database content remotely...

CVE-2019-2768

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI...

SQL injection vulnerability in the background op***_co***.php file of PHPOK enterprise website builder system

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A SQL injection vulnerability exists in the opco.php file in the background of PHPOK enterprise website system. Remote attackers can use this vulnerability to obtain sensitive information in the database...

The vulnerability of the WLS component – the Web Services server of the J2EE application servers from Oracle WebLogic Server – allows attackers to gain access to confidential information.

The vulnerability of the WLS component—the Web Services server for J2EE applications—in Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information from a remote location...

PT-2021-7704 · Zabbix +3 · Zabbix +3

Name of the Vulnerable Software and Affected Versions: Zabbix versions 4.0.x through 4.0.28rc1 Zabbix versions 5.0.0alpha1 through 5.0.10rc1 Zabbix versions 5.2.x through 5.2.6rc1 Zabbix versions 5.4.0alpha1 through 5.4.0beta2 Description: The issue is related to a lack of CSRF protection mechani...

The vulnerability of the xmlrpc_decode() function, a part of the XMLRPC interpreter for the PHP programming language, relates to the reading of data beyond the buffer memory boundary, allowing attackers to gain access to confidential data.

The vulnerability of the xmlrpcDecode function in the PHP programming language is related to an error that causes memory access beyond the allocated range. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of WLS Core Components of Oracle WebLogic Server application servers allows attackers to gain unauthorized access to protected information.

The vulnerability of Oracle WebLogic Server’s application server’s WLS core components is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

UBUNTU-CVE-2018-3123

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: libmysqld. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

PT-2019-5748 · Openjpeg +6 · Openjpeg +6

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.3.0 Description: The issue is related to an improper computation in the opj get encoding parameters function, which can lead to an integer overflow. This can potentially allow a remote attacker to access...

The vulnerability in the web interface of the Graphite software for managing policies, billing, and managing subscriber data in the Cisco Policy Suite for Mobile allows a perpetrator to gain access to protected data.

The vulnerability in the web interface of the Graphite software for managing policies, billing, and managing subscriber data in the Cisco Policy Suite for Mobile is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

The vulnerability of the WLS component – the Web Services server of Oracle WebLogic Server – allows a perpetrator to gain access to protected information.

The vulnerability of the WLS component—the Web Services server of Oracle WebLogic Server—is related to insufficient access control. Exploiting this vulnerability could allow an attacker operating remotely to gain access to protected information using the HTTP protocol...

The vulnerability of the Outside In Filters component of the software development kit (SDK) from Outside In Technology allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using th...

The vulnerability of the Integration Broker component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a perpetrator to gain unauthorized access to data.

The vulnerability of the Integration Broker component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to data using the HTTP...

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTT...