The vulnerability of the XFS file system in Linux operating systems allows a perpetrator to cause service failures or gain increased privileges.

The vulnerability of the XFS file system in Linux operating systems is related to insufficient control over metadata during the mounting of XFS file system images in the xlogrecoverbufcommitpass2 function within the fs/xfs/xfsbufitemrecover.c module. Exploiting this vulnerability can allow an...

Vulnerability of the Server component: The MySQL Server database management system’s DDL functions allow attackers to gain privileged access or cause service interruptions.

Vulnerability of the MySQL Server component: The MySQL Server database management system has vulnerabilities due to insufficient validation of input data. Exploitation of these vulnerabilities can allow attackers to gain privileged access or cause service interruptions from a remote location...

The vulnerability of the OBVAM Internal Tfr Domain component of the Oracle Banking Virtual Account Management component in the banking analytics system’s simulation model of Oracle Financial Services Applications allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.

The vulnerability of the OBVAM Internal Tfr Domain component of the Oracle Banking Virtual Account Management component in the banking analytics system’s simulation model of Oracle Financial Services Applications is related to insufficient validation of input data. Exploiting this vulnerability...

Vulnerability of the MySQL Server component: This component is part of the Database Management System, allowing attackers to cause service failures.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.

The vulnerability of the OBVAM Trn Journal Domain component of the Oracle Banking Virtual Account Management banking analytics system’s simulation model relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access...

The vulnerability of the Oracle Database Recovery Manager component of the Oracle Database Server database management system allows a perpetrator to trigger a service failure.

The vulnerability of the Oracle Database Recovery Manager component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing allows a malicious individual to gain unauthorized access to the device or cause a partial service failure.

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device remotely, or cause a partial service...

The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.

The vulnerability of the OBVAM Trn Journal Domain component of the Oracle Banking Virtual Account Management banking analytics system’s simulation model relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access...

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing allows a malicious individual to cause service interruptions.

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2023-28698

Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt service...

The vulnerability of the io_install_fixed_file() function in the io_uring subsystem of Linux kernels allows a malicious actor to escalate their privileges or cause service failures.

The vulnerability of the ioinstallfixedfile function in the iouring subsystem of Linux kernels relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

The vulnerability of the L2ALM component in Juniper Networks’ Junos OS-based QFX router series allows a hacker to induce a service failure.

The vulnerability of the L2ALM component Layer 2 Address Learning Manager in Juniper Networks’ Junos OS-based QFX series routers stems from the use of memory after it is freed due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to...

The vulnerability of the Zyxel NBG-418N v2 Wi-Fi router’s microprogramming software, related to the use of uncontrolled format strings, allows a hacker to trigger a service failure.

The vulnerability of the microprogrammed Wi-Fi router Zyxel NBG-418N v2 lies in the use of uncontrolled format strings when processing binary files. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending specially crafted packets...

PT-2023-21944 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform versions 420, 430 Description: The issue allows an authenticated attacker with administrator privileges to obtain the login token of any logged-in BI user over the network without any user...

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to disclose sensitive information and also cause service failures.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, as well as cause service failures...

CVE-2022-47617

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

PT-2023-3550 · Hitron Technologies · Coda-5310

Name of the Vulnerable Software and Affected Versions: Hitron Technologies CODA-5310 affected versions not specified Description: The issue is related to insufficient authentication in the system configuration interface, allowing an unauthorized remote attacker to access the interface. This can...

The vulnerability of the Web Container server component of the Oracle WebLogic Server application software, which allows a hacker to disclose sensitive information and also cause service failures.

The vulnerability of the Web Container server component of the Oracle WebLogic Server application software, part of the Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, as well as...

The vulnerability of the command-line interface (CLI) of Cisco Aironet Access Point software allows a attacker to execute arbitrary commands or cause service interruptions.

The vulnerability of the command-line interface CLI of Cisco Aironet Access Point microprogramming software exists because measures to neutralize the special elements used in the operating system command are not taken. Exploiting this vulnerability can allow an attacker to execute arbitrary...

CVE-2023-20852

aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ interpreter. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service...