ASUS Armoury Crate permissions and access control issues

ASUS Armoury Crate V3.0.0 version to V6.5.10 and ASUS Armoury Crate SE V2.1.17 version to V2.2.17 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from uncontrolled search path elements. Local users can execute arbitrary code by replacing the...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1. These vulnerabilities stem from issues with the Server:...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 has security vulnerabilities, which stem from issues with the Plugins component. These vulnerabilities could allow high-privilege attackers to log in and execute actions on the infrastructure, requiring user interaction. This could result in unauthorized creation, deletion, or...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the InnoDB component. They may allow high-privilege attackers to access the system via various protocols, resulting in...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in BrowserTag, which may allow remote attackers to read memory within the sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a buffer overflow vulnerability, which stems from memory corruption in CSS. This vulnerability could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Oracle Siebel CRM Development Security Vulnerabilities

The Oracle Siebel CRM Development from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Integration-Scripting component. They could allow low-privilege attackers to log in and execute actions on the infrastructure. This could lead to unauthorized...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper access control practices in Ozone, which may allow remote attackers to exploit the system by leaking sensitive information through...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They could allow low-privilege attackers to log in and access infrastructure, thereby enabling unauthorized updates, insertions...

Open Source Social Network: Input validation error vulnerability

The Open Source Social Network versions 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 9.7, 9.8, 9.9, 9.10, 9.11, 10.0, and 10.1 have security vulnerabilities. These vulnerabilities stem from improper handling of parameters such as host, port, username, password, type, and status in the...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server and MySQL Cluster versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1; MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: Optimizer...

IBM QRadar SIEM resource management error vulnerability

The IBM QRadar SIEM versions from 7.4-20210823144546 to 7.5-20260930064858, and from 7.6-20260330053257 to 7.6-20260930064910 contain resource management vulnerabilities. These vulnerabilities stem from uncontrolled resource consumption, which may allow remote attackers to cause denial-of-service...

Apple iOS Buffer Overflow Vulnerability

Apple iOS versions prior to 26.7, Apple iPadOS versions prior to 26.7, Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia 15.8 versions prior to 27, Apple macOS Tahoe versions prior to 26.7, Apple tvOS versions prio...

IBM App Connect Enterprise configuration error vulnerability

The IBM App Connect Enterprise versions 13.0.1.0 to 13.0.8.2 have a configuration error vulnerability. This vulnerability stems from binding to unrestricted IP addresses, which may allow remote attackers to obtain sensitive information...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 on iOS contain a buffer error vulnerability. This vulnerability stems from memory corruption in iOS WebViews. A remote attacker can read memory within the sandbox through a specially crafted HTML page...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Porting component, which may allow low-privilege attackers to log in and execute actions on the infrastructure. This can result in service downtime or...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503 and 8u503-perf versions have security vulnerabilities. These vulnerabilities stem from issues with the Java plugin component. Exploitation by attackers with low privileges, after logging in to the infrastructure running Oracle Java SE, may lead to unauthorized creation,...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: Telemetry component. They may allow high-privilege attackers to access the system via the network and use various protocols,...

Red Hat Enterprise Linux information leakage vulnerability

Red Hat Enterprise Linux has a vulnerability related to information leakage. This vulnerability arises when the VNC console settings are saved in the cockpit-machines, and the configured passwords are directly passed as command-line parameters to the underlying system utilities. Unauthorized loca...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 version contains security vulnerabilities. These vulnerabilities stem from issues with the Libraries component. The vulnerabilities are difficult to exploit; attackers need to log in locally and rely on user interaction to exploit them. This can lead to service hangs or freque...