DrayTek Vigor2960 path traversal vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a path traversal vulnerability. This vulnerability stems from incorrect handling of the setSWMProfile parameter in the function setSWMProfile located in the file/cgi-bin/mainfunction.cgi. This could lead to path traversal attacks, and attackers could...

ASUS Armoury Crate permissions and access control issues

ASUS Armoury Crate V3.0.0 version to V6.5.10 and ASUS Armoury Crate SE V2.1.17 version to V2.2.17 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from uncontrolled search path elements. Local users can execute arbitrary code by replacing the...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in DevTools, which could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Google Chrome on Windows versions prior to 156.0.8078.47 contains a buffer error vulnerability. This vulnerability stems from memory corruption in ANGLE, which may allow remote attackers to read memory within the sandbox via specially crafted HTML pages...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper access control practices in Ozone, which may allow remote attackers to exploit the system by leaking sensitive information through...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow low-privilege attackers to log into the infrastructure running on JD Edwards EnterpriseOne...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in ContextualSearch; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code within a sandbox...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in DevTools, potentially allowing remote attackers to read memory within a sandbox via specially crafted HTML pages...

Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a vulnerability related to permission escalation and access control. This issue stems from improper access control mechanisms, potentially allowing remote attackers to bypass web source policies via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption issues in DevTools, which may allow remote attackers to read memory within a sandbox via specially crafted HTML pages...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Porting component, which may allow low-privilege attackers to log in and execute actions on the infrastructure. This can result in service downtime or...

Red Hat Enterprise Linux information leakage vulnerability

Red Hat Enterprise Linux has a vulnerability related to information leakage. This vulnerability arises when the VNC console settings are saved in the cockpit-machines, and the configured passwords are directly passed as command-line parameters to the underlying system utilities. Unauthorized loca...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the InnoDB component. They may allow high-privilege attackers to access the system via various protocols, resulting in...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1. These vulnerabilities stem from issues with the Server:...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: Telemetry component. They may allow high-privilege attackers to access the system via the network and use various protocols,...

Oracle PeopleSoft Enterprise FIN Manufacturing Brazil security vulnerabilities

The Oracle PeopleSoft Enterprise FIN Manufacturing Brazil 9.1 version has a security vulnerability. This vulnerability stems from issues with the Integration component. It could allow low-privilege attackers to exploit the vulnerability by logging in as the user who operates the infrastructure on...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a buffer overflow vulnerability, which stems from memory corruption in CSS. This vulnerability could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1. These vulnerabilities stem from issues with the Server: Optimiz...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 has security vulnerabilities, which stem from issues with the Plugins component. These vulnerabilities could allow high-privilege attackers to log in and execute actions on the infrastructure, requiring user interaction. This could result in unauthorized creation, deletion, or...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from memory corruption in Skia, which may allow remote attackers to read memory within the sandbox through specially crafted HTML pages...