Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution

A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient input validation, which attackers could exploit to execute malicious code on affected systems...

The vulnerability of the Opera Servlet component of the Oracle Hospitality Opera 5 software, a hospitality management system, allows a hacker to execute arbitrary code and gain full control over the application.

The vulnerability of the Opera Servlet component of the Oracle Hospitality Opera 5 software for managing hotel resources is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely and gain full control over the...

PT-2024-32283 · Opentext · Opentext Application Automation Tools

Name of the Vulnerable Software and Affected Versions: OpenText Application Automation Tools versions 24.1.0 and below Description: The issue is related to improper validation of specified quantity in input, allowing exploitation of incorrectly configured access control security levels. Multiple...

The vulnerability of the Windows Hyper-V hardware virtualization system allows attackers to circumvent existing security restrictions.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

CVE-2024-39437

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2024-20521

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability, an attacker would need to have valid...

Advantech ADAM-5630 Cross-Site Request Forgery Vulnerability

Advantech ADAM-5630 is an edge intelligent data acquisition controller from Advantech, China. The Advantech ADAM-5630 suffers from a cross-site request forgery vulnerability that is caused by improper validation of user-supplied input. An attacker could use this vulnerability to perform...

The vulnerability of the Networking component of Windows operating systems, which allows a hacker to trigger a service failure

The vulnerability of the Networking component of Windows operating systems exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2024-8277

The WooCommerce Photo Reviews Premium plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.3.13.2. This is due to the plugin not properly validating what user transient is being used in the login function and not properly verifying the user's identit...

CVE-2024-45166

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service DoS attacks and possibly remote code execution...

Apache IoTDB 代码问题漏洞

Apache IoTDB is an integrated data management engine designed for time-series data from the Apache USA Foundation, which provides data collection, storage, and analysis services, among other things. Apache IoTDB suffers from a server-side request forgery vulnerability that stems from the product'...

Tailoring Management System SQL注入漏洞

Tailoring Management System is itsourcecode open source a tailoring management system . Tailoring Management System version 1.0 SQL injection vulnerability , the vulnerability stems from the parameter title lack of validation of external input SQL statements . An attacker can exploit this...

Vulnerability of the MySQL Server component: The MySQL Server component of the database management system allows a hacker to trigger a service failure.

Vulnerability of the MySQL Server component: The MySQL Server component of the database management system has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause service interruptions remotely...

The vulnerability of the Attribute Admin Setup component of the software application Attribute Admin Setup of the Oracle E-Business Suite allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the Attribute Admin Setup component of the Attribute Admin Setup software and the Oracle E-Business Suite system exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or...

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data...

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle Complex Maintenance, Repair, and Overhaul systems—a system for automating business operations in Oracle E-Business Suite—allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the LOV component in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, add, or...

VMware Aria Automation Security Vulnerability

VMware Aria Automation is a modern workflow automation platform from VMware that simplifies and automates complex data center infrastructure tasks to improve scalability and agility. A security vulnerability exists in VMware Aria Automation that stems from a failure to apply proper input...

SAP CRM Cross-Site Scripting Vulnerability

SAP CRM is a customer relationship management system from SAP, a German company. A cross-site scripting vulnerability exists in SAP CRM that stems from insufficient input validation, allowing an unauthenticated attacker to craft URL links embedded with malicious scripts to be able to access and/o...

RHEL 5 : vim (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - vim: Integer overflow at an unserializeuep memory allocation site CVE-2017-6350 - Untrusted search path...