CVE-2021-2338: Undefined Security Weakness

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Email Marketing Stand-Alone. Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps -...

CVE-2021-2355: Undefined Security Weakness

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

Oracle E-Business Suite输入验证错误漏洞

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is seamlessly integrated with a management suite.Oracle...

CVE-2021-2385: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...

Oracle VM VirtualBox输入验证错误漏洞

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.24. An attacker could use this vulnerability to gain unauthorized read access to a portion of the product-accessibl...

Oracle Fusion Middleware 安全漏洞

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. In Filters component contains a security vulnerability. An...

CVE-2021-2356: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQ...

PT-2021-6834

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.34 and prior MySQL Server versions 8.0.25 and prior Description The issue is related to insufficient input validation in the MySQL Server product, specifically in the Server: Replication component. This allows a...

PT-2021-4009

Name of the Vulnerable Software and Affected Versions Java SE versions 7u301, 8u291, 11.0.11, 16.0.1 Oracle GraalVM Enterprise Edition versions 20.3.2 and 21.1.0 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle Graal...

CVE-2021-33671

SAP NetWeaver Guided Procedures Administration Workset, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality...

PT-2021-20249

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Guided Procedures Administration Workset versions 7.10 through 7.50 Description: The issue results from the lack of necessary authorization checks for an authenticated user, leading to escalation of privileges. This could allow...

CVE-2021-26920: Externally Controlled Reference to a Resource in Another Sphere

In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not a...

PHPKB knowledge base software Unauthenticated Access Disclosure

The vulnerability of the PHPKB knowledge base software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

WAGO Series PFC200 Path Traversal

The vulnerability of the microprogrammed software in WAGO Series PFC200 programmable logic controllers is related to incorrect restrictions on the path name in the restricted access catalog. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to...

Account Hierarchy Manager Data Access

The vulnerability of the Account Hierarchy Manager component in the Oracle General Ledger financial processing system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain access to create, modify, or delete data using the HTTP protocol...

OESA-2021-1213 openjdk-1.8.0 security update

The OpenJDK runtime environment 8. Security Fixes: Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM...

PT-2021-11063

Name of the Vulnerable Software and Affected Versions: Trace Financial CRESTBridge versions prior to 6.3.0.03 Description: The issue is an authenticated SQL injection vulnerability. This means that an attacker who has valid credentials can potentially inject malicious SQL code into the system,...

Apple M1 Architecture Unauthorized Access

The vulnerability of the Apple M1 chip’s architecture is related to the open access from the EL0 mode of the ARM architecture registers, under the code s35c15c101. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to protected information...

HPESBUX04160 rev.2 - HP-UX OpenSSL, Multiple Vulnerabilities

Potential Security Impact: Local: Unauthorized Access to Diagnostic Data, Unauthorized Arbitrary File Creation, Unqualified Configuration Change; Remote: Unauthorized Access to Diagnostic Data, Unauthorized Arbitrary File Creation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed...

Advantech iView SQL Injection Vulnerability (CNVD-2021-40757)

Advantech Iview is a Simple Network Protocol SNMP based management software for B + B SmartWorx devices from Advantech, China. Advantech Iview suffers from an SQL injection vulnerability that arises from the susceptibility of the affected product to SQL injection attacks, which could allow an...