Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Search Framework component. They are difficult to exploit, and it is possible for unauthenticated attackers to access critical data or all accessible data...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform Security component, and the attack is relatively difficult. Unauthenticated attackers who gain access to the physical...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. They are difficult to exploit. Unauthenticated attackers can access critical data or all accessible data by...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Push Notifications component, which may allow attackers with high privileges to access the hardware’s physical communication layer, thereby taking control...

[SECURITY] Fedora 43 Update: nginx-mod-modsecurity-1.0.4-12.fc43

The ModSecurity-nginx connector is the connection point between nginx and libmodsecurity ModSecurity v3. Said another way, this project provides a communication channel between nginx and libmodsecurity. This connector is required to use LibModSecurity with nginx. The ModSecurity-nginx connector...

EUVD-2023-38116

Malicious code in bioql PyPI...

@0xshogun/sdk-react (1.1.40), @0xsquid/deposit-widget (>=0.0.2-beta.0, <=0.2.0) +240 more potentially affected by unknown CVE via @metamask/sdk-communication-layer (>=0.16.0, <=0.33.0)

@metamask/sdk-communication-layer NPM version =0.16.0, =0.0.2-beta.0, =2.1.11-beta.0, =3.0.0-beta.16, =0.0.1, =0.0.11, =0.2.1, =4.0.0-alpha.0, =3.16.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: GHSA-QJ3P-XC97-XW74...

@0xshogun/sdk-react (1.1.40), @0xsquid/deposit-widget (>=0.0.2-beta.0, <=0.2.0) +240 more potentially affected by unknown CVE via @metamask/sdk-communication-layer (>=0.16.0, <=0.33.0)

@metamask/sdk-communication-layer NPM version =0.16.0, =0.0.2-beta.0, =2.1.11-beta.0, =3.0.0-beta.16, =0.0.1, =0.0.11, =0.2.1, =4.0.0-alpha.0, =3.16.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-QJ3P-XC97-XW74...

CVE-2023-33992

The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAPBW 730, SAPBW 731, SAPBW 740, SAPBW 730, SAPBW 750, DW4CORE 100, DW4CORE 200, DW4CORE 300, may expose unauthorized cell values to the data response. To be able to exploit this, the user still needs...

CVE-2023-33992

CVE-2023-33992 concerns the SAP BW BICS layer in SAP Business Warehouse and SAP BW/4HANA (SAP_BW 730–731, 740, 750; DW4CORE 100–300) where unauthorized cell values can be exposed in data responses. The asset’s data exposure arises from a missing authorization check at the data level; exploitation...

CVE-2023-33992 Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA

The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAPBW 730, SAPBW 731, SAPBW 740, SAPBW 730, SAPBW 750, DW4CORE 100, DW4CORE 200, DW4CORE 300, may expose unauthorized cell values to the data response. To be able to exploit this, the user still needs...