CVE-2023-22117

CVE-2023-22117 affects Oracle FLEXCUBE Universal Banking (Infrastructure component). Vulnerable versions: 12.3, 12.4, 14.0–14.3, and 14.5–14.7. Root cause cited in connected sources: insufficient input validation in the Infrastructure component, enabling a low-privileged attacker with network acc...

kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route

This record is a duplicate of CVE-2023-4206, CVE-2023-4207, and CVE-2023-4208. Do not use this CVE record: CVE-2023-4128...

Oracle Financial Services Applications Security Vulnerability

Oracle Financial Services Applications and Oracle FLEXCUBE Universal Banking are both products of Oracle Corporation, USA.Oracle Financial Services Applications is a suite of financial services Oracle Financial Services Applications is a suite of financial services software. Oracle Financial...

PT-2023-6392 · Oracle · Oracle Flexcube Universal Banking

Name of the Vulnerable Software and Affected Versions: Oracle FLEXCUBE Universal Banking versions 12.3, 12.4, 14.0 through 14.3, 14.5 through 14.7 Description: The issue is related to insufficient input validation in the Infrastructure component of Oracle FLEXCUBE Universal Banking, allowing a...

PT-2023-6391 · Oracle · Oracle Flexcube Universal Banking

Name of the Vulnerable Software and Affected Versions: Oracle FLEXCUBE Universal Banking versions 12.3, 12.4, 14.0 through 14.3, 14.5 through 14.7 Description: The issue is related to insufficient input validation in the Infrastructure component of Oracle FLEXCUBE Universal Banking, allowing a...

PT-2023-6638 · Oracle · Oracle Flexcube Universal Banking

Name of the Vulnerable Software and Affected Versions: Oracle FLEXCUBE Universal Banking versions 12.3, 12.3 through 12.4, 14.0 through 14.3, 14.5 through 14.7 Description: The issue is related to insufficient input validation in the Infrastructure component of Oracle FLEXCUBE Universal Banking,...

Oracle Financial Services Applications Security Vulnerability

Oracle Financial Services Applications and Oracle FLEXCUBE Universal Banking are both products of Oracle Corporation, USA.Oracle Financial Services Applications is a suite of financial services Oracle Financial Services Applications is a suite of financial services software. Oracle Financial...

Oracle Financial Services Applications Security Vulnerability

Oracle Financial Services Applications and Oracle FLEXCUBE Universal Banking are both products of Oracle Corporation, USA.Oracle Financial Services Applications is a suite of financial services Oracle Financial Services Applications is a suite of financial services software. Oracle Financial...

SUSE CVE-2023-45862

An issue was discovered in drivers/usb/storage/eneub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation...

CVE-2022-48612

A Universal Cross Site Scripting UXSS vulnerability in ClassLink OneClick Extension through 10.7 allows remote attackers to inject JavaScript into any webpage, because a regular expression validating whether a URL is controlled by ClassLink is not present in all applicable places...

Cross site scripting

A Universal Cross Site Scripting UXSS vulnerability in ClassLink OneClick Extension through 10.7 allows remote attackers to inject JavaScript into any webpage, because a regular expression validating whether a URL is controlled by ClassLink is not present in all applicable places...

CVE-2022-48612

A Universal Cross Site Scripting UXSS vulnerability in ClassLink OneClick Extension through 10.7 allows remote attackers to inject JavaScript into any webpage, because a regular expression validating whether a URL is controlled by ClassLink is not present in all applicable places...

CVE-2022-48612

A Universal Cross Site Scripting UXSS vulnerability in ClassLink OneClick Extension through 10.7 allows remote attackers to inject JavaScript into any webpage, because a regular expression validating whether a URL is controlled by ClassLink is not present in all applicable places...

CVE-2022-48612

CVE-2022-48612 describes a Universal Cross Site Scripting (UXSS) weakness in ClassLink OneClick Extension up to version 10.7, enabling remote JavaScript injection by exploiting missing URL-control regexes in multiple code paths. Connected documents extend the impact to 10.8 (CVE-2023-45889) and i...

XINJE XDPPro Code Issue Vulnerability

XINJE XDPPro is a USB port connection programming software using PLC from China XINJE. A code issue vulnerability exists in XINJE XDPPro version 3.7.17a and prior versions. An attacker could use this vulnerability to cause an uncontrolled search path...

New OS Tool Tells You Who Has Access to What Data

Ensuring sensitive data remains confidential, protected from unauthorized access, and compliant with data privacy regulations is paramount. Data breaches result in financial and reputational damage but also lead to legal consequences. Therefore, robust data access security measures are essential ...

USN-6412-1 linux, linux-aws, linux-aws-6.2, linux-azure, linux-azure-6.2, linux-azure-fde-6.2, linux-gcp, linux-gcp-6.2, linux-hwe-6.2, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-6.2, linux-oracle, linux-raspi, linux-starfive vulnerabilities

Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel contained a race condition during device removal, leading to a use-after- free vulnerability. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

CVE-2023-44208

creationtimestamp| type| source ---|---|--- 2023-10-04 16:11:52+00:00| seen| https://t.me/cibsecurity/71563...

The vulnerability of the U3D File Parser component in the PDF-XChange PDF document viewing and editing software allows a hacker to execute arbitrary code.

The vulnerability of the U3D File Parser component in the PDF-XChange PDF viewing and editing software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Duplicate Advisory: EVE's Debug Functions Unlockable Without Triggering Measured Boot

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4c4v-42hc-72p6. This link is maintained to preserve external references. Original Description On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the...