Oracle Java SE security vulnerabilities

Oracle Java SE 8u503 and 8u503-perf versions have security vulnerabilities. These vulnerabilities stem from issues with the Java plugin component. Exploitation by attackers with low privileges, after logging in to the infrastructure running Oracle Java SE, may lead to unauthorized creation,...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: Telemetry component. They may allow high-privilege attackers to access the system via the network and use various protocols,...

Open Source Social Network: Input validation error vulnerability

The Open Source Social Network versions 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 9.7, 9.8, 9.9, 9.10, 9.11, 10.0, and 10.1 have security vulnerabilities. These vulnerabilities stem from improper handling of parameters such as host, port, username, password, type, and status in the...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Porting component, which may allow low-privilege attackers to log in and execute actions on the infrastructure. This can result in service downtime or...

LeeDrOiD Labs Shortcutter 2 App: Permissions issues and vulnerabilities in access control

LeeDrOiD Labs Shortcutter 2 App version 9.0.48 has vulnerabilities related to permissions and access control. These vulnerabilities stem from incorrect handling of the parameter Class in the Class.forName function within the file ToggleGeneric.java. This improper export of Android application...

IBM App Connect Enterprise configuration error vulnerability

The IBM App Connect Enterprise versions 13.0.1.0 to 13.0.8.2 have a configuration error vulnerability. This vulnerability stems from binding to unrestricted IP addresses, which may allow remote attackers to obtain sensitive information...

Apple iOS Buffer Overflow Vulnerability

Apple iOS versions prior to 26.7, Apple iPadOS versions prior to 26.7, Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia 15.8 versions prior to 27, Apple macOS Tahoe versions prior to 26.7, Apple tvOS versions prio...

Red Hat Enterprise Linux information leakage vulnerability

Red Hat Enterprise Linux has a vulnerability related to information leakage. This vulnerability arises when the VNC console settings are saved in the cockpit-machines, and the configured passwords are directly passed as command-line parameters to the underlying system utilities. Unauthorized loca...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow high-privilege attackers to log in and access the infrastructure, enabling them to create, delete, or modify...

DrayTek Vigor2960 path traversal vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a path traversal vulnerability. This vulnerability stems from the handling of the 'action' parameter in the '/cgi-bin/mainfunction.cgi' file within component Apmupload, allowing for path traversal attacks. Attackers can exploit this vulnerability remote...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption issues in DevTools, which may allow remote attackers to read memory within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 have a buffer error vulnerability. This vulnerability stems from memory corruption in Skia, which may allow remote attackers to read memory within the sandbox through specially crafted HTML pages...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in DevTools, which could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, including the MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have security vulnerabilities. These vulnerabilities stem from issues with the ...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Business Logic Infra SEC component, potentially allowing low-privilege attackers to access the JDENET network. Such attackers may make...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in the Transactions Platform, potentially allowing remote attackers to read memory within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in Google Lens, which may allow remote attackers to read memory within the sandbox via specially crafted HTML pages...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 version contains security vulnerabilities. These vulnerabilities stem from issues with the Libraries component. The vulnerabilities are difficult to exploit; attackers need to log in locally and rely on user interaction to exploit them. This can lead to service hangs or freque...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow low-privilege attackers to log into the infrastructure running on JD Edwards EnterpriseOne...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper V8 access control mechanisms, which may allow remote attackers to bypass web source policies through specially crafted HTML pages...