PT-2022-2147

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.11 Description The issue is related to insufficient input validation in the Reseller Locator component of Oracle Partner Management. It allows an unauthenticated attacker with network access...

PT-2022-2149

Name of the Vulnerable Software and Affected Versions Primavera Portfolio Management versions 18.0.0.0 through 18.0.3.0 Primavera Portfolio Management versions 19.0.0.0 through 19.0.1.2 Primavera Portfolio Management versions 20.0.0.0 through 20.0.0.1 Description The issue is related to...

Oracle Communications 输入验证错误漏洞

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation. an authorization issue vulnerability exists in Oracle Communications Convergence that could be...

PT-2022-2101

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue is related to insufficient input validation in the Oracle WebLogic Server Core component. This can be exploited by a...

PT-2022-2093

Name of the Vulnerable Software and Affected Versions Primavera Portfolio Management versions 18.0.0.0 through 18.0.3.0 Primavera Portfolio Management versions 19.0.0.0 through 19.0.1.2 Primavera Portfolio Management versions 20.0.0.0 through 20.0.0.1 Description The issue is related to...

New macOS vulnerability, “powerdir,” could lead to unauthorized user data access

Following our discovery of the “Shrootless” vulnerability, Microsoft uncovered a new macOS vulnerability, “powerdir,” that could allow an attacker to bypass the operating system’s Transparency, Consent, and Control TCC technology, thereby gaining unauthorized access to a user’s protected data. We...

Philips Engage Software 安全漏洞

Philips Engage Software is used by the Dutch company Philips to convert visitors into qualified leads. A security vulnerability exists in Philips Engage Software that stems from improper access control. An attacker could exploit the vulnerability to gain unauthorized access to sensitive data...

CVE-2021-45910

Removed by vendor...

UBUNTU-CVE-2021-4135

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsimmapallocelem being called. A local user could use this flaw to get unauthorized access to some data...

CVE-2021-0961

An uninitialized data read flaw in the Linux kernel Android enhanced xtquota that can count upwards and in packets functionality was found in the way user calls function quotaprocwrite. A local user could use this flaw to get unauthorized data access...

CVE-2021-36780 Unauthorized data access from replicas through vulnerable instance manager pods

A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a replica that they should not have access to. This issue affects: SUSE Longhorn...

CVE-2021-36780: Missing Authentication for Critical Function

A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a replica that they should not have access to. This issue affects: SUSE Longhorn...

CVE-2021-20865

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse unauthorized data via unspecified vectors...

CVE-2021-20865

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse unauthorized data via unspecified vectors...

Authorization

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse unauthorized data via unspecified vectors...

CVE-2021-20865

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse unauthorized data via unspecified vectors...

PT-2021-14308

Name of the Vulnerable Software and Affected Versions: Advanced Custom Fields versions prior to 5.11 Advanced Custom Fields Pro versions prior to 5.11 Description: The issue concerns a missing authorization vulnerability in the browsing database. This may allow a user to browse unauthorized data...

CVE-2021-20865: Missing Authorization

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse unauthorized data via unspecified vectors...

Google Chrome Contacts Picker Unauthorized Access

The vulnerability of the Contacts Picker component in the Google Chrome browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain unauthorized access to protected information through a specially creat...

Delicious Brains Advanced Custom Fields Access Control Error Vulnerability

Delicious Brains Advanced Custom Fields is an advanced custom fields plug-in from Delicious Brains Canada.An access control error vulnerability exists in Delicious Brains Advanced Custom Fields, which stems from a lack of authorization associated with database browsing The vulnerability stems fro...