CVE-2023-22011

CVE-2023-22011 affects Oracle BI Enterprise Edition (Analytics Server). Affected: Oracle Analytics BI EE with Analytics Server component on versions 6.4.0.0.0 and 7.0.0.0.0. Issue: easily exploitable via network (HTTP) by a low-privileged attacker, enabling unauthorized update/insert/delete of da...

WordPress WP Data Access Plugin < 5.3.11 is vulnerable to Cross Site Scripting (XSS)

Software WP Data Access Type Plugin Vulnerable versions 5.3.11 Fixed in 5.3.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6b613d773243 Credits Rafie Muhammad Patchstack Require...

PT-2023-4023 · Oracle · Oracle Hyperion Financial Reporting

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Financial Reporting version 11.2.13.0.000 Description: The issue is related to insecure privilege management in the Repository component of Oracle Hyperion Financial Reporting. It allows a low-privileged attacker with network...

Oracle Essbase 安全漏洞

Oracle Hyperion and Oracle Essbase are products of Oracle Corporation.Oracle Hyperion is a set of financial modeling applications. The software provides financial closure, report production, etc. Oracle Essbase is an application. Enables organizations to quickly generate insights from...

PT-2023-4032 · Oracle · Oracle Agile Plm

Name of the Vulnerable Software and Affected Versions: Oracle Agile PLM version 9.3.6 Description: The issue is related to errors in processing input data in the WebClient component of Oracle Agile PLM. This can allow a remote attacker to gain read, modify, add, or delete access to data. Successf...

Oracle Supply Chain Products Suite 安全漏洞

Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle Oracle. The product provides value chain planning, value chain execution, and product lifecycle management capabilities. Oracle Supply Chain's Oracle Agile PLM product has a security vulnerability that originates in...

Oracle PeopleSoft Enterprise PeopleTools 安全漏洞

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for providing PeopleSoft applications with the ability to stay in sync with users' needs and expectations. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft Enterprise PeopleTools product that originates in the Portal...

Oracle Hyperion 安全漏洞

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closing, report creation, and other functions. A security vulnerability exists in Oracle Hyperion's Oracle Hyperion Financial Reporting product, which arises from a...

The vulnerability of the IBM Robotic Process Automation software lies in its authentication procedures’ flaws, which allow attackers to gain read, modify, or delete access to data.

The vulnerability of the IBM Robotic Process Automation software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to read, modify, or delete data...

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to cause unauthorized update, insertion, or deletion access to MySQL Server accessible data...

Oracle Essbase 安全漏洞

Oracle Essbase is an application from Oracle Corporation Oracle. It enables organizations to quickly generate insights from multidimensional data sets using what-if analysis and data visualization tools. A security vulnerability exists in Oracle Essbase that originates in the Security and...

Oracle E-Business Suite 跨站脚本漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in the Oracle Scripti...

PT-2023-3965

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u371 Description The issue is related to a vulnerability in the JavaFX component of Oracle Java SE, allowing an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successfu...

Oracle Health Sciences Applications 安全漏洞

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle Corporation. A security vulnerability in Oracle Health Sciences Applications' Oracle Health Sciences Sciences Data Management Workbench product, which originates in the Blindin...

Oracle Business Intelligence Enterprise Edition 安全漏洞

Oracle Business Intelligence Enterprise Edition is an intelligent business analytics software from Oracle. It provides visual analysis of enterprise data to support decision-making, reduce total cost of ownership, and increase ROI across the organization. A security vulnerability exists in Oracle...

CVE-2023-2760

An SQL injection vulnerability exists in TapHome core HandleMessageUpdateDevicePropertiesRequest function before version 2023.2, allowing low privileged users to inject arbitrary SQL directives into an SQL query and execute arbitrary SQL commands and get full reading access. This may also lead to...

The vulnerability of the Good plugin (gst-plugins-good) in the Gstreamer multimedia framework allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the Good gst-plugins-good plugin of the Gstreamer multimedia framework is related to insufficient protection of sensitive data due to the absence of security updates on the remote host. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protect...

The vulnerability of the Base plugin (gst-plugins-base) in the Gstreamer multimedia framework allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the Base plugin gst-plugins-base in the Gstreamer multimedia framework is related to insufficient protection of service data due to the lack of security updates on the remote host. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

SUSE CVE-2023-29450

JavaScript pre-processing can be used by the attacker to gain access to the file system read-only access on behalf of user "zabbix" on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data...

Critical Security Flaws Uncovered in Honeywell Experion DCS and QuickBlox Services

Multiple security vulnerabilities have been discovered in various services, including Honeywell Experion distributed control system DCS and QuickBlox, that, if successfully exploited, could result in severe compromise of affected systems. Dubbed Crit.IX, the nine flaws in the Honeywell Experion D...