Oracle MySQL Server permission and access control issue vulnerability

Versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 of Oracle MySQL Server, as well as versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 of Oracle MySQL Cluster, contain a permission and access control vulnerability...

Oracle MySQL Server permission and access control issue vulnerability

Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 are affected by a permission and access control vulnerability...

Vulnerability related to permission and access control issues in Amazon CICD-toolchain-for-serverless-applications

Versions 1.0.7 through 1.0.10 of Amazon CICD-toolchain-for-serverless-applications contain a privilege escalation and access control vulnerability. This issue stems from improper permission allocation within IAM policies. It may allow a remote authenticated user possessing push permissions for th...

Oracle Solaris security vulnerabilities

A security vulnerability exists in Oracle Solaris 11.4; it stems from issues within the Utility component and may allow attackers with limited privileges to log in to Oracle Solaris and take control of the underlying infrastructure...

Oracle Siebel CRM Deployment Security Vulnerabilities

There are security vulnerabilities in Oracle Siebel CRM Deployment from version 17.0 to 26.9. These vulnerabilities stem from issues with the Server Infrastructure component, and they could allow attackers with high privileges to log in, access the infrastructure, and take control of Oracle Siebe...

Artifex Software Ghostscript: Permissions, Licenses, and Access Control Vulnerabilities

Artifex Software Ghostscript has vulnerabilities related to permission management and access control. These vulnerabilities stem from insufficient protection for the privileged forceput operation during the .charkeys process. Processing specially crafted PostScript files can bypass the -dSAFER...

Eclipse ThreadX FileX input validation error vulnerability

Versions 6.5.1.202602 and earlier of Eclipse ThreadX FileX contain a security vulnerability. This vulnerability arises when an attacker with control over the FAT image that enables fault tolerance mounts a filesystem, leading to an out-of-bounds heap write during log replay. Both the location and...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component. They may allow unverified attackers to log into JD Edwards EnterpriseOne Tools and access the infrastructure it operat...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from an issue within the Database Actions component and may allow highly privileged attackers to gain HTTP network access, potentially...

Python Packaging Authority virtualenv permission and access control issue vulnerability

The Python Packaging Authority identifies a permission and access control vulnerability in virtualenv versions prior to 21.14.9. This vulnerability arises when the app-data replication seeder uses shutil.copy to copy cached package files to subsequent environments; the permission mode of the sour...

Oracle Java SE permission and access control issue vulnerability

Security vulnerabilities exist in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, and 21.3.19.1.1. These vulnerabilities stem from improper access control in the 2D component, potentially allowing unauthenticat...

Oracle MySQL Server permission and access control issue vulnerability

Oracle MySQL Server versions 9.7.0 through 9.7.3 contain a permission and access control vulnerability stemming from issues in the Server: Optimizer component. This vulnerability may allow low-privilege attackers to gain network access via various protocols, potentially causing MySQL Server and...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In PDF Export SDK component. It may allow unauthorized attackers to gain access through the HTTP network, thereby taking control of Oracle Outside In Technology when user...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from Core component problems and may allow highly privileged attackers to gain HTTP network access, interact with users, and unauthorizedly...

Oracle Siebel CRM Deployment permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Server Infrastructure component, potentially allowing low-privilege attackers to log in and execute infrastructure tasks,...

Oracle MySQL Connectors permission and access control issue vulnerability

Oracle MySQL Connectors version 26.7.0 contains a vulnerability related to permission and access control issues. This flaw stems from problems within the Connector/Net component, potentially allowing unauthenticated attackers to gain network access via various protocols. Under certain user...

Eclipse ioFog resource management error vulnerability

Versions 3.8.0 through 3.9.1 of Eclipse ioFog contain a resource management error vulnerability. This vulnerability arises because, prior to authentication and RBAC, POST, PUT, and PATCH request bodies on routes that enable template substitution are rendered by an unrestricted Liquid engine...

Oracle Solaris Permission Licensing and Access Control Vulnerabilities

Oracle Solaris 11.4 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the X Window System components, which may allow attackers with low privileges to log into infrastructure running Oracle Solaris and carry out attacks...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers to access data through the HTTP network, requiring user...

Oracle Solaris Authorization Issues Vulnerabilities

Oracle Solaris 11.3 and 11.4 versions have authorization-related vulnerabilities. These vulnerabilities stem from issues with the Image Packaging System component, which may allow unauthenticated attackers to gain control of Oracle Solaris through HTTP network access...