WordPress Participants Database Authorization Issue Vulnerability

The WordPress Participants Database versions 2.7.8.5 and earlier have an authorization issue vulnerability. This vulnerability stems from bypassing authorization through user control keys, which may lead to exploitation if the access control security levels are configured improperly...

Oracle Autonomous Health Framework security vulnerabilities

The Oracle Autonomous Health Framework versions 26.3 to 26.8 have security vulnerabilities. These vulnerabilities stem from issues with the Trace File Analyzer component. They could allow low-privilege attackers to log in to the infrastructure that runs Oracle Autonomous Health Framework and take...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Attackers with low privileges may exploit these vulnerabilities to gain control of Siebel CRM Cloud Applications through HTTP...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Foundation component, and it could allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of Oracle Business...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper V8 access control mechanisms, which may allow remote attackers to bypass web source policies through specially crafted HTML pages...

Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Image Export SDK component. This vulnerability may allow unauthenticated attackers to log in, execute infrastructure tasks, and require user interaction. Successful...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

The Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 contains a security vulnerability stemming from issues in the Presentation Services component. This vulnerability may allow attackers with limited privileges to log in and take control of the infrastructure running Oracle...

Oracle Bills of Material security vulnerabilities

Oracle Bills of Material versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Bills of Material through HTTP network access...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Capacity through HTTP network access...

Oracle iSetup permission licensing and access control vulnerabilities

Oracle iSetup versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the General Ledger Update Transform and Reports components. They could allow low-privilege attackers to gain control of Oracle iSetup throu...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Documents component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control of Oracle One-to-One...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Application Server component, which may allow unauthenticated attackers to access through the HTTP network and take control of Oracle Agile PLM during user interactions...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.4 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component. Unauthorized attackers may exploit these vulnerabilities by accessing the physical communication segments connected to...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Payroll through HTTP network access...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Installation Security component and may allow unauthenticated attackers to log into the product’s infrastructure, thereby taking control of J...

Apple macOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple macOS prior to Golden Gate 27, Apple macOS Sequoia prior to 15.8, and Apple macOS Tahoe prior to 26.7 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper access control mechanisms, which may allow applications to acce...

Oracle Siebel CRM Development Security Vulnerabilities

The Oracle Siebel CRM Development versions from 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Approval Manager component. Unauthorized attackers may exploit these vulnerabilities to gain access through the HTTP network and take control of Siebe...

Oracle Identity Manager security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager contain a security vulnerability stemming from issues in the OIM Legacy UI component. This vulnerability may allow low-privilege attackers to gain control over Oracle Identity Manager via HTTP network access...

Eclipse ThreadX buffer error vulnerability

A security vulnerability exists in Eclipse ThreadX versions 6.0.1 through 6.5.1.202602a. It arises because the Module Manager object searches only by verifying the length of the search name; it fails to utilize a buffer with a length limit parameter. Under privileged mode, it iterates through...

Oracle Advanced Outbound Telephony permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Advanced Outbound Telephony contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component. It may allow low-privilege attackers to gain HTTP network access by...