The vulnerability of the Security component of the Oracle Hyperion Financial Management application, which allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Security component of the Oracle Hyperion Financial Management application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the GraalVM Compiler component of the Oracle GraalVM Enterprise Edition allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the GraalVM Compiler component in the Oracle GraalVM Enterprise Edition is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data through various network protocols...

The vulnerability of the Media Foundation component in Windows operating systems allows attackers to enhance their privileges or gain access to modify, add, or delete data.

The vulnerability of the Media Foundation component in Windows operating systems is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to enhance their privileges or gain access to modify, add, or delete data using a specially created application or a...

The vulnerability of the Windows operating system, related to errors in memory object handling, allows an attacker to increase their privileges or gain access to modify, add, or delete data.

The vulnerability of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges or gain access to modify, add, or delete data...

The vulnerability of the Windows operating system’s kernel, related to errors in memory object handling, allows an attacker to exploit their privileges or gain access to modify, add, or delete data.

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges or gain access to modify, add, or delete data using a specially created application...

The vulnerability of the Windows operating system, related to call processing errors, allows a perpetrator to increase their privileges or gain access to modify, add, or delete data.

The vulnerability of the Windows operating system is related to errors in call handling. Exploiting this vulnerability can allow an attacker to increase their privileges or gain access to modify, add, or delete data...

The vulnerability of the Windows Print Spooler component of the Windows operating system allows a perpetrator to increase their privileges or gain access to modify, add, or delete data.

The vulnerability of the Windows Print Spooler component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges or gain access to modify, add, or delete data...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Hedge Management and IFRS Valuations banking analytical system’s simulation model applications allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Hedge Management and IFRS Valuations banking analytical system’s simulation model applications is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor t...

The vulnerability of the Microsoft Color Management color control module in the Windows operating system allows a malicious actor to elevate their privileges or gain access to modify, add, or delete data.

The vulnerability of the Microsoft Color Management color control module in the Windows operating system relates to operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges or gain access to modify, add, or delet...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Balance Sheet Planning component in the bank analytics system’s simulation model allows a perpetrator to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Balance Sheet Planning banking analytics system’s simulation model relates to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to create, delete, or modify access...

The vulnerability of the Media Foundation component in Windows operating systems allows attackers to enhance their privileges or gain access to modify, add, or delete data.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges or gain access to modify, add, or delete data...

The vulnerability of the Transaction Processing sub-component of the Oracle FLEXCUBE Core Banking banking analytics system’s simulation model, Oracle Financial Services Applications. This vulnerability allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data. It can also cause partial service interruption.

The vulnerability of the Transaction Processing sub-component of the Oracle FLEXCUBE Core Banking banking analytics system, an imitation model of Oracle Financial Services Applications, is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious act...

Cisco Prime Collaboration Provisioning SQL Injection Vulnerability (CNVD-2020-29595)

Cisco Prime Collaboration Provisioning PCP is a set of Web-based, next-generation communications services software from Cisco. The software provides IP communication service features for IP telephony, voice mail and unified communications environments. Cisco Prime Collaboration Provisioning suffe...

Schneider Electric EcoStruxure Operator Terminal Expert

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Low skill level to exploit/public exploits are available Vendor: Schneider Electric Equipment: EcoStruxure Operator Terminal Expert Vulnerabilities: SQL Injection, Path Traversal, Argument Injection 2. RISK EVALUATION Successful exploitation of these...

The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite allows a perpetrator to gain access to and modify data.

The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, ...

The vulnerability of the Attribute Admin Setup sub-component of the Oracle Partner Management component in the Oracle E-Business Suite system allows a malicious actor to gain access to and modify data.

The vulnerability of the Attribute Admin Setup sub-component of the Oracle Partner Management component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or...

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite system, which allows a malicious actor to gain read access to data and modify it.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, or delet...

The vulnerability of the Customer Search sub-component of the Oracle Email Center component in the Oracle E-Business Suite enterprise automation system allows a malicious actor to gain access to and modify data.

The vulnerability of the Customer Search sub-component of the Oracle Email Center component in the Oracle E-Business Suite enterprise automation system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to modify, add, or delete data...

The vulnerability of the Preferences sub-component of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite allows a perpetrator to gain access to and modify data.

The vulnerability of the Preferences sub-component of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite system relates to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to read,...