The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool (formerly XML Publisher) allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool formerly XML Publisher is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using...

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, which is used for automating business operations. This vulnerability allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, a business automation solution, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite system allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the Kernel Mode Driver component of the Intel Graphics Driver allows a hacker to execute arbitrary code.

The vulnerability of the Kernel Mode Driver component in Intel Graphics Drivers is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ATutor 2.2.4 - file_manager Remote Code Execution Exploit #RCE

Exploit for php platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ATutor %q This module allows the user to run commands on the server with teacher user...

ATutor < 2.2.4 - 'file_manager' Remote Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ATutor %q This module allows the user to run commands on the server with teacher user privilege. The 'Upload files' section in the 'File Manager'...

ATutor file_manager Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ATutor %q This module allows the user to run commands on the server with teacher user privilege. The 'Upload files' section in the 'File Manager'...

IBM API Connect Privileging Vulnerability (CNVD-2019-09479)

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. An elevation of privilege vulnerability exists in Developer Portal in IBM API Connect versions...

The vulnerability of the driver that enables the operation of RAID arrays in Matrix Storage Manager, due to deficiencies in access control, allows a hacker to increase their privileges.

The vulnerability of the driver that enables the operation of RAID arrays in Matrix Storage Manager is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

The vulnerability of the file system configuration settings in the Cisco NX-OSS device’s networking operating system allows a perpetrator to increase their privileges and gain access to protected information.

The vulnerability of the file system configuration settings in the Cisco NX-OSS network operating system devices relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to protected information...

The vulnerability in the implementation of the Bash shell of the Cisco NX-OS network operating system in Cisco devices allows a hacker to increase their privileges.

The vulnerability of the Bash shell implementation of the Cisco NX-OS network operating system in Cisco devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the hxterm service component in the high-convergence infrastructure of Cisco HyperFlex allows attackers to enhance their privileges.

The vulnerability of the hxterm service in Cisco HyperFlex hyperconverged infrastructure is related to insufficient authentication control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Oracle Solaris operating system’s Zones component allows a attacker to gain access to protected information, modify file access rights, or cause service interruptions.

The vulnerability of the Oracle Solaris operating system’s Zones component is related to insufficient access control. Exploiting this vulnerability can allow an attacker to gain access to protected information, modify file access rights, or cause service interruptions...

The vulnerability of the Integrator component of the Oracle Endeca Information Discovery Integrator software, which allows a malicious individual to gain unauthorized access to protected data.

The vulnerability of the Integrator component of the Oracle Endeca Information Discovery Integrator software for data collection and analysis is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service allows a intruder to gain unauthorized access to data.

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data using the HTTP protocol...

The vulnerability of the Oracle FLEXCUBE Direct Banking (Logoff Page) component of the banking analytics system in the Oracle Financial Services Applications model allows a perpetrator to gain access to protected information.

The vulnerability of the Oracle FLEXCUBE Direct Banking Logoff Page component of the banking analytics system in the Oracle Financial Services Applications is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a malicious actor to gain unauthorized access to data or cause service failures.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data or cause service failures using the HTTP protocol...