Vulnerabilities in Microsoft System Center

Microsoft has identified vulnerabilities in Configuration Manager and Defender. A local malicious individual could exploit these vulnerabilities to gain elevated privileges and potentially access sensitive data. Microsoft Configuration Manager:...

EUVD-2018-18964

Malware in sbrugna...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Circumvention of a security measure - Execution of arbitrary code root/admin privileges - Execution...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in QMS Automotive, Parasolid, WIBU, Teamcenter, JT2Go, Spectrum Power 7, SIMATIC, SIPLUS and RUGGEDCOM products. The vulnerabilities allow a malicious potentially able to carry out attacks that could result in the following categories of damage: Denial-of-Service...

PT-2022-21021

Name of the Vulnerable Software and Affected Versions Badminton Center Management System version 1.0 Description The issue allows for SQL Injection via the /bcms/admin/?page=user/manage user&id= API endpoint, potentially allowing unauthorized access to sensitive data. The id parameter is vulnerab...

PT-2022-20082

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue allows for SQL Injection via the "/sns/admin/?page=posts/view post&id=" API endpoint, specifically targeting the id variable. This could potentially lead to...

Vulnerabilities fixed in Oracle Fusion Middleware

Oracle has fixed vulnerabilities in the following Oracle Fusion Middleware products: Fusion Middleware HTTP Server Fusion Middleware MapViewer BI Publisher formerly XML Publisher BAM Business Activity Monitoring WebCenter Portal Business Intelligence Enterprise Edition Data Integrator WebLogic...

PT-2021-19641

Name of the Vulnerable Software and Affected Versions: Hexagon G!nius Auskunftsportal versions prior to 5.0.0.0 Description: The issue allows SQL injection via the id parameter in the "GiPWorkflow/Service/DownloadPublicFile" API endpoint. This could potentially lead to unauthorized access to...

PT-2021-16400

Name of the Vulnerable Software and Affected Versions: HPE Cloudline CL5800 Gen9 Server HPE Cloudline CL5200 Gen9 Server HPE Cloudline CL4100 Gen10 Server HPE Cloudline CL3100 Gen10 Server HPE Cloudline CL5800 Gen10 Server Description: The Baseboard Management Controller BMC in the affected HPE...

Vulnerabilities fixed in Oracle Hyperion

Oracle has fixed vulnerabilities in the following Oracle Hyperion products: Hyperion Infrastructure Technology Hyperion Financial Reporting The vulnerabilities allow an unauthenticated malicious person with network access to the vulnerable system may be able to launch attacks execute attacks that...

CVE-2020-10598: Protection Mechanism Failure

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...

PT-2018-12602

Name of the Vulnerable Software and Affected Versions CWJoomla CW Article Attachments PRO extension versions prior to 2.0.7 CW Article Attachments FREE extension versions prior to 1.0.6 Description The issue allows SQL Injection within the "download.php" endpoint. This could potentially lead to...

PT-2018-12223

Name of the Vulnerable Software and Affected Versions Firebase Cloud Messaging FCM + Advance Admin Panel versions prior to 2017-10-26 Description The issue allows SQL injection via the "/advance push/public/login" API endpoint, specifically through the username parameter. This could potentially...

Cisco Elastic Services Controller Information Disclosure Vulnerability (CNVD-2017-11575)

Cisco Elastic Services Controller is a cloud and systems management solution. Cisco Elastic Services Controllers have a security vulnerability in the file system implementation, where a local attacker obtains sensitive information about an affected system...