Code injection

Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get...

CVE-2023-29044

CVE-2023-29044 describes a cross-document collaboration flaw where operations could contain invalid data types and potentially script code, enabling code execution for users collaborating on the same document. Multiple connected sources (Open-Xchange App Suite, Red Hat advisory, Google Docs conte...

CVE-2023-39695

Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out...

CVE-2022-3007

The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update DFU which is used for performing Over-The-Air OTA firmware updates on the Bluetooth Low Energy BLE devices. An unauthenticated attacker could exploit this...

CVE-2022-3007

The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update DFU which is used for performing Over-The-Air OTA firmware updates on the Bluetooth Low Energy BLE devices. An unauthenticated attacker could exploit this...

CVE-2022-3007

CVE-2022-3007 – Syska SW100 Smartwatch vulnerability arises from an improper implementation/configuration of Nordic Device Firmware Update (DFU) used for OTA updates over Bluetooth Low Energy. An unauthenticated attacker can set arbitrary values via BLE, potentially allowing a firmware update, de...

CVE-2022-3007 Unauthorized Access Vulnerability in Syska SW100 Smartwatch

The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update DFU which is used for performing Over-The-Air OTA firmware updates on the Bluetooth Low Energy BLE devices. An unauthenticated attacker could exploit this...

SUSE CVE-2020-14828

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

CVE-2023-39695

CVE-2023-39695 affects Elenos ETG150 FM Transmitter v3.12. The issue is insufficient session expiration, enabling an attacker to arbitrarily change transmitter configuration and data after logout. Affected component is the session handling of the device; impact is unauthorized configuration/data ...

PT-2023-30042 · Minical · Minical

Name of the Vulnerable Software and Affected Versions: minCal version 1.0.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the customer data parameter. This enables the attacker to potentially gain control over the system, leading to unauthorized...

The vulnerability of the Pod Admin component of the Oracle Business Intelligence Enterprise Edition software platform allows a malicious individual to gain access to read, modify, add, or delete data.

The vulnerability of the Pod Admin component of the Oracle Business Intelligence Enterprise Edition software platform is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to read, modify, add, or delete data...

Vulnerabilities fixed in Oracle E-Business Suite

Vulnerabilities have been fixed in Oracle E-Business Suite products. A malicious party could exploit the vulnerabilities to perform attacks that can result in the following categories of damage: Manipulation of data Bypassing authentication Oracle has fixed the vulnerabilities in the following...

Vulnerabilities fixed in Oracle Database Server

Vulnerabilities have been fixed in Oracle Database Server products. A malicious party can exploit the vulnerabilities to perform attacks that can result in the following categories of damage: Denial-of-Service DoS Manipulation of data Bypassing authentication Bypassing security measure Oracle has...

Vulnerabilities fixed in Oracle Virtualization

Vulnerabilities have been fixed in Oracle VM VirtualBox. The vulnerabilities potentially enable a malicious party to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Oracle has fixed the vulnerabilities in the following...

CVE-2023-22025

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition:...

Buffer overflow

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition:...

CVE-2023-22080

CVE-2023-22080 affects Oracle PeopleSoft Enterprise PeopleTools (component PIA Core Technology) in supported PeopleTools 8.59 and 8.60. The vulnerability is exploitable over HTTP by an unauthenticated attacker and requires user interaction, with potential to cause unauthorized update/insert/delet...

Exploit for CVE-2023-45828

CVE-2023-45828 RumbleTalk Live Group Chat = 6.1.9 - Missin...

Deserialization Of Untrusted Data

vantage6 is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to the library's use of the insecure pickle library which is used serialization for deserializing data, enabling an attacker to manipulate the serialized data by injecting malicious code...

The Risks of Exposing DICOM Data to the Internet

Introduction Digital Imaging and Communications in Medicine DICOM is the international standard for the transmission, storage, retrieval, print, and display of medical images and related information. While DICOM has revolutionized the medical imaging industry, allowing for enhanced patient care...