67 matches found
Multiple vulnerabilities in Cybozu Office
Overview Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-839CyVDB-2300CyVDB-3109 Browse restriction bypass vulnerability in Cabinet CWE-284 - CVE-2022-32283 CyVDB-1795 Operation restriction bypass vulnerability in Project CWE-285 - CVE-2022-32544...
The vulnerability of the Process Scheduler component in the PeopleSoft Enterprise PeopleTools business application package allows a hacker to gain read access to data or modify data.
The vulnerability of the Process Scheduler component in the PeopleSoft Enterprise PeopleTools business application exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read access to data or modify data using special...
The vulnerability of the Scheduler sub-component of the Oracle BI Publisher software, a component of the Oracle Fusion Middleware software platform. This vulnerability allows an attacker to execute arbitrary code, as well as to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Scheduler sub-component of the Oracle BI Publisher software component of the Oracle Fusion Middleware software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely, as well as...
Cybozu Garoon 授权问题漏洞
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon, which originates from an error in the processing of...
Cybozu Garoon 输入验证错误漏洞
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An input validation error vulnerability exists in Cybozu Garoon, which stems from insufficient user-supplied inpu...
CVE-2021-2391
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Scheduler. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
Oracle Fusion Middleware 输入验证错误漏洞
Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage, and deliver all reports and documents. Oracle BI Publisher 5.5.0.0.0, 11.1.1.7.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 An unspecified vulnerability exists in the Schedule...
The vulnerability of the scheduled data synchronization module “LOCMAN Scheduler for Synchronization” of the Engineering Data and Product Lifecycle Management system LOCMAN lies in its ability to load files of a dangerous type indefinitely, allowing a perpetrator to execute arbitrary codes.
The vulnerability of the scheduled data synchronization module “LOZMAN Planner” of the engineering data and product lifecycle management system LOZMAN is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to execute arbitrary code by replacing D...
CVE-2021-20624
Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors...
Multiple vulnerabilities in Cybozu Office
Overview Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-1657 Operational restrictions bypass vulnerability in Scheduler CWE-264 - CVE-2021-20624 CyVDB-1727 Operational restrictions bypass vulnerability in Bulletin Board CWE-264 - CVE-2021-20625...
Cybozu Office 安全漏洞
Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. An operation restriction bypass vulnerability exists in the scheduler program in Cybozu Office. An attacker could use this vulnerability to alter data in the scheduler without proper privileges...
The vulnerability of the RDBMS Scheduler component of the Oracle Database Server management system allows a hacker to execute arbitrary code.
The vulnerability of the RDBMS Scheduler component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted network packets remotely...
CVE-2021-2035
Vulnerability in the RDBMS Scheduler component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Export Full Database privilege with network access via Oracle Net to compromis...
libquartz: XXE attacks via job description
The Terracotta Quartz Scheduler is susceptible to an XML external entity attack XXE through a job description. This issue stems from inadequate handling of XML external entity XXE declarations in the initDocumentParser function within xml/XMLSchedulingDataProcessor.java. By enticing a victim to...
Oracle Database Server Scheduler component unauthorized access vulnerability
Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. An unauthorized access vulnerability exists in the Oracle Database Server Scheduler...
The vulnerability of the Windows Task Scheduler, a task scheduling tool for operating systems, allows attackers to exploit their privileges.
The vulnerability of the Windows Task Scheduler, a task scheduling tool for Windows operating systems, is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2014-8126
The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code...
DEBIAN-CVE-2014-8126
The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code...
CVE-2019-5978
Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the application 'Scheduler'...
PoC Exploit For Unpatched Windows 10 Zero-Day Flaw Published Online
An anonymous hacker with an online alias "SandboxEscaper" today released proof-of-concept PoC exploit code for a new zero-day vulnerability affecting Windows 10 operating system—that's his/her 5th publicly disclosed Windows zero-day exploit 1, 2, 3 in less than a year. Published on GitHub, the ne...