SQL Injection Vulnerability in Ruiyou Tianyi Application Virtualization System of Xi'an Ruiyou Information Technology Information Co. Ltd (CNVD-2024-23827)

Ruiyou Tianyi Application Virtualization System is a domestic application virtualization platform with independent intellectual property rights, which is based on Server-based Computing. Xi'an Ruiyou Information Technology Co., Ltd. Ruiyou Tianyi Application Virtualization System suffers from a S...

Arbitrary File Download Vulnerability in Intelligent Park Comprehensive Management Platform of Zhejiang Dahua Technology Company Limited (CNVD-2024-23621)

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. Zhejiang Dahua Technology Co., Ltd. intelligent park integrated management platform has an arbitrary file download vulnerability, which can be exploited by...

Command Execution Vulnerability in Raisecom iSDC of Raisecom Technology Development Co.

Risecomm Technology Development Co., Ltd. is a provider of optical network products and system solutions. A command execution vulnerability exists in Raisecom iSDC, which can be exploited by attackers to gain server privileges...

JSOutProx’s Latest Incarnation Strikes Fear in Financial Circles

...

CmsEasy security vulnerabilities

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou ET Technology CmsEasy. A security vulnerability exists in CmsEasy version 7.7.7.9, which stems from the presence of a code execution vulnerability...

JIZHICMS security vulnerabilities

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from China's Extreme Networks Technology. A security vulnerability exists in JIZHICMS version 2.5, which stems from the presence of a file upload vulnerability...

CVE-2024-21119

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

CVE-2024-21120

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

CVE-2024-21118

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

CVE-2024-21117

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

CVE-2024-20990

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite component: Templates. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

CVE-2024-20990

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite component: Templates. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...

CVE-2024-21119

CVE-2024-21119 affects Oracle Outside In Technology (Outside In Core) within Oracle Fusion Middleware. Affected: Oracle Outside In Technology versions 8.5.6–8.5.7. Local authenticated attackers can gain update/insert/delete permissions and read access to data, with potential partial denial of ser...

CVE-2024-21118

CVE-2024-21118 affects Oracle Outside In Technology (Outside In Core) in Oracle Fusion Middleware. Affected are Oracle Outside In Technology versions 8.5.6 and 8.5.7. The root cause is insufficient input validation in Outside In Core, enabling a local, low-privileged attacker with logon to the in...

CVE-2024-21117

CVE-2024-21117 affects Oracle Outside In Technology (Outside In Core) in Oracle Fusion Middleware; affected 8.5.6–8.5.7. Local, low-privilege attacker with logon can achieve low-impact confidentiality, integrity, and availability results (partial DOS). Root cause cited is insufficient input valid...

PT-2024-3724

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient protection of service data in the Templates component of Oracle Applications Technology. It allows an unauthenticated attacker with...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Applications...

Oracle Fusion Middleware’s Oracle Outside In Technology security vulnerabilities

Oracle Fusion Middleware and Oracle Outside In Technology are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more. Oracle Outside In Technology is a...

Oracle Fusion Middleware’s Oracle Outside In Technology security vulnerabilities

Oracle Fusion Middleware and Oracle Outside In Technology are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more. Oracle Outside In Technology is a...

CVE-2024-20990: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite component: Templates. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications...