Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1. These vulnerabilities stem from issues with the Server: Optimiz...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 has security vulnerabilities, which stem from issues with the Plugins component. These vulnerabilities could allow high-privilege attackers to log in and execute actions on the infrastructure, requiring user interaction. This could result in unauthorized creation, deletion, or...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from memory corruption in Skia, which may allow remote attackers to read memory within the sandbox through specially crafted HTML pages...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper V8 access control mechanisms, which may allow remote attackers to bypass web source policies through specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from memory corruption in WebAppInstalls, which may allow remote attackers to read memory within a sandbox through a specially crafted HTML page...

Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a vulnerability related to permission escalation and access control. This issue stems from improper access control within ComputePressure; remote attackers can exploit it by using specially crafted HTML pages to bypass web source policies...

EspoCRM authorization issue vulnerability

EspoCRM versions 9.3.10 and earlier, as well as 10.0.10 and earlier, have an authorization vulnerability. This vulnerability stems from improper handling of the parameter ID in the ImageSourceProvider::get function within the PDF Rendering Pipeline component. This could lead to authorization...

Oracle Product Lifecycle Analytics security vulnerability

Version 3.6.1 of Oracle Product Lifecycle Analytics contains a security vulnerability stemming from issues within the Installation Issues component. This vulnerability may allow privileged attackers to log in and execute infrastructure tasks, thereby unauthorizedly creating, deleting, or modifyin...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They could allow low-privilege attackers to log in and access infrastructure, thereby enabling unauthorized updates, insertions...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 version contains security vulnerabilities. These vulnerabilities stem from issues with the Libraries component. The vulnerabilities are difficult to exploit; attackers need to log in locally and rely on user interaction to exploit them. This can lead to service hangs or freque...

DrayTek Vigor2960 path traversal vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a path traversal vulnerability. This vulnerability stems from the handling of the 'action' parameter in the '/cgi-bin/mainfunction.cgi' file within component Apmupload, allowing for path traversal attacks. Attackers can exploit this vulnerability remote...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server and MySQL Cluster versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1; MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: Optimizer...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Business Logic Infra SEC component, potentially allowing low-privilege attackers to access the JDENET network. Such attackers may make...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow high-privilege attackers to log in and access the infrastructure, enabling them to create, delete, or modify...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in BrowserTag, which may allow remote attackers to read memory within the sandbox via specially crafted HTML pages...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, versions 9.7.0 to 9.7.3 and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: GIS component. They may allow high-privilege attackers to access the system via various protocols, causing the MySQL Server and MySQL Cluster...

Oracle Mobile Field Service security vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow high-privilege attackers to log in and execute infrastructure tasks, thereby taking control of Oracle Mobile Field...

LeeDrOiD Labs Shortcutter 2 App: Permissions issues and vulnerabilities in access control

LeeDrOiD Labs Shortcutter 2 App version 9.0.48 has vulnerabilities related to permissions and access control. These vulnerabilities stem from incorrect handling of the parameter Class in the Class.forName function within the file ToggleGeneric.java. This improper export of Android application...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503 and 8u503-perf versions have security vulnerabilities. These vulnerabilities stem from issues with the Java plugin component. Exploitation by attackers with low privileges, after logging in to the infrastructure running Oracle Java SE, may lead to unauthorized creation,...

Oracle GoldenGate security vulnerabilities

A security vulnerability exists in Oracle GoldenGate versions 21.3 through 21.23. This vulnerability stems from issues within the Vendor Access Module component and may allow low-privilege attackers to log in to Oracle GoldenGate Infrastructure, thereby gaining unauthorized access to critical dat...