Artifex Software Ghostscript: Permissions, Licenses, and Access Control Vulnerabilities

Artifex Software Ghostscript has vulnerabilities related to permission management and access control. These vulnerabilities stem from insufficient protection for the privileged forceput operation during the .charkeys process. Processing specially crafted PostScript files can bypass the -dSAFER...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. Unauthorized attackers may gain access through the HTTP network. They can update, insert, or delete certain...

Eclipse ThreadX FileX input validation error vulnerability

Versions 6.5.1.202602 and earlier of Eclipse ThreadX FileX contain a security vulnerability. This vulnerability arises when an attacker with control over the FAT image that enables fault tolerance mounts a filesystem, leading to an out-of-bounds heap write during log replay. Both the location and...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper extension access control mechanisms, which may allow remote attackers to disclose sensitive information through specially crafted HTM...

LeeDrOiD Labs Shortcutter 2 App: Permissions issues and vulnerabilities in access control

LeeDrOiD Labs Shortcutter 2 App version 9.0.48 has vulnerabilities related to permissions and access control. These vulnerabilities stem from incorrect handling of the parameter Class in the Class.forName function within the file ToggleGeneric.java. This improper export of Android application...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.20 has a security vulnerability. This vulnerability stems from issues with the Core component and could allow attackers with high privileges and access to the physical communication ports connected to the hardware running Oracle VM VirtualBox to take control of it. This...

Oracle Call Center Technology security vulnerabilities

Oracle Call Center Technology versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow unauthenticated attackers to access through the RMI network and take control of Oracle Call Center Technology...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access and control Oracle Mobile Field Service via an HTTPS network...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to gain control of Oracle Mobile Field Service...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers with network access to unauthorizedly update, insert, or...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 contain vulnerabilities related to authorization. These vulnerabilities stem from issues with the Fabric Layer component, which may allow unauthenticated attackers to gain control of the Oracle SOA Suite through HTTP network access...

Oracle Access Manager authorization issue vulnerability

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Authentication Engine component, which may allow unauthenticated attackers to access and take control of Oracle Access Manager through the SAML network...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control...

Oracle General Ledger security vulnerabilities

Oracle General Ledger versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the ADADMIN component, and they could allow low-privilege attackers to gain access to and control of Oracle General Ledger through network interactions...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Adapters component. Attackers with low privileges may exploit these vulnerabilities to gain control of Oracle SOA Suite through HTTP network access. This could...

Oracle Inventory Management security vulnerabilities

Oracle Inventory Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of Oracle...

Oracle Global Lifecycle Management OPatchAuto security vulnerability

The Oracle Global Lifecycle Management OPatchAuto version 12.2.0.1.16 to 12.2.0.1.52 contains security vulnerabilities. These vulnerabilities stem from issues with the Database extensions component. They may allow attackers with high privileges to log in and execute infrastructure tasks, thereby...

Oracle Sourcing security vulnerability

A security vulnerability exists in Oracle Sourcing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Auctions component and may allow low-privilege attackers to gain access via HTTP network connections, thereby taking control of Sourcing...

Oracle WebLogic Server authorization issue vulnerability

Versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 of Oracle WebLogic Server contain an authorization issue vulnerability. This vulnerability stems from a Core component problem and may allow unauthenticated attackers to gain HTTP network access and take control of the Oracle WebLogic...

Oracle Siebel CRM Integration permission and access control issue vulnerability

Versions 25.12 through 26.9 of Oracle Siebel CRM Integration contain a vulnerability related to permission and access control issues. This vulnerability stems from an Open Integration component flaw, potentially allowing unauthenticated attackers to gain network access via HTTP. Under user...