Oracle Product Lifecycle Analytics security vulnerability

Version 3.6.1 of Oracle Product Lifecycle Analytics contains a security vulnerability stemming from issues within the Installation Issues component. This vulnerability may allow privileged attackers to log in and execute infrastructure tasks, thereby unauthorizedly creating, deleting, or modifyin...

Oracle PeopleSoft Enterprise FIN Common Objects Argentina security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 contains a security vulnerability stemming from an issue in its Integration component. This vulnerability may allow unauthenticated attackers to gain access via the Oracle Net network, potentially leading to unauthorized access...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503-perf version, 11.0.32.1 version, 17.0.20.1 version, 21.0.12.1 version, 25.0.4.1 version, and 27 version have security vulnerabilities. These vulnerabilities are due to issues with the Networking component, which may allow unauthenticated attackers to access networks via vario...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data through the HTTP network, gain unauthorized access to key data, or access all dat...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, including the MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have security vulnerabilities. These vulnerabilities stem from issues with the...

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland security vulnerability

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2 contains a security vulnerability stemming from issues within the Global Payroll for Switzerland component. This vulnerability may allow privileged attackers to log in and execute infrastructure tasks, perform unauthorized...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from an issue in the ADP component, potentially allowing unauthenticated attackers to access certain accessible data via HTTP without authorization...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Application Data Sets component. It may allow attackers with limited privileges to create, delete, or modify critical or accessible data via HTTP...

Oracle Trusted Answer Search security vulnerability

Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues with the PLSQL package component. This vulnerability may allow attackers with low privileges and network access to create, delete, or modify critical data or all accessible data via Oracle Net without...

CodeWithCJ SparkyFitness Authorization Issue Vulnerability

Versions of CodeWithCJ SparkyFitness prior to 0.17.0 have a vulnerability related to authorization. This vulnerability arises from a lack of authorization checks. Authorized attackers can use the DELETE /api/foods/food-variants/:id endpoint to delete food variants for other users. They can also u...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities stem from issues with the...

Apple macOS Security Vulnerabilities

Versions of Apple macOS Golden Gate prior to version 27 contain security vulnerabilities. These vulnerabilities stem from improper configuration of additional authorizations, which may allow applications access to sensitive user data...

IBM Guardium Data Protection encryption vulnerability

IBM Guardium Data Protection versions 12.1 and 12.2 have vulnerabilities related to encryption. These vulnerabilities stem from the use of hardcoded encryption keys, which may allow remote attackers to obtain sensitive information...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data through the HTTP network, enabling unauthorized access to key data or full access...

Oracle Siebel CRM Development Security Vulnerabilities

The Oracle Siebel CRM Development from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Integration-Scripting component. They could allow high-privilege attackers to access through the CORBA network, resulting in service hangs or frequent crashes...

Apple iOS Authorization Issue Vulnerability

Versions of Apple iOS prior to version 27 and Apple iPadOS prior to version 27 have a vulnerability related to authorization issues. This vulnerability may allow applications to access sensitive user data...

Oracle Communications Billing and Revenue Management Authorization Issues Vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have authorization issues. This issue stems from problems with the BRM Server component. It may allow unauthorized attackers to access the network via HTTP, thereby enabling them to...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform component, which may allow low-privilege attackers to log in and access critical data or all...

Oracle JDeveloper security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle JDeveloper contain a security vulnerability stemming from issues in the ADF Databinding component. This vulnerability may allow attackers with limited privileges to access critical data or all accessible data via the SOAP network, potentially leading t...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503 and 8u503-perf versions have security vulnerabilities. These vulnerabilities stem from issues with the RMI component, which may allow unauthorized attackers to access the network via various protocols. Unauthorized updates, insertions, or deletions of certain accessible data,...