TYPO3 File Manager SQL Injection Vulnerability

Versions of the TYPO3 File Manager prior to 3.1.3 have a SQL injection vulnerability. This vulnerability arises from the file search function, which escapes LIKE wildcards only when constructing database query conditions, but does not escape quotes. Attackers can alter the database queries with...

Python Packaging Authority virtualenv encryption vulnerability

The Python Packaging Authority virtualenv version 21.14.8 has a security vulnerability. This vulnerability stems from downloadwheel, which downloads the package index into a reusable cache before validating the target based on the Saved output from pip. Due to a flaw in the digest comparison, a...

Oracle Concurrent Processing security vulnerability

Oracle Concurrent Processing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Other Issues component and are difficult to exploit. They may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critic...

Oracle Java SE resource management error vulnerability

Versions 8u503, 21.0.12, 25.0.4, and 27 of Oracle Java SE, as well as version 21.3.19.1.1 of Oracle GraalVM Enterprise Edition contain a resource management error vulnerability. This vulnerability stems from improper use-after-free issues in JavaFX components. Unauthenticated attackers can exploi...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Monitoring and Diagnostics SEC component. It may allow low-privilege attackers to create, delete, or modify critical data or all accessible...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Versions 9.2.0.0 through 9.2.26.5 of Oracle JD Edwards EnterpriseOne Tools contain a security vulnerability stemming from issues within the Installation Security component. This hard-to-exploite vulnerability enables unauthenticated attackers to log into the JD Edwards EnterpriseOne Tools...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component. Unauthorized attackers may gain access through the Oracle Net network, allowing them to access critical data or all...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content 14.1.2.0.0 version has a security vulnerability. This vulnerability stems from issues with the Content Server component, which may allow attackers with low privileges to access through the HTTP network and unauthorizedly read certain accessible data...

Oracle Purchasing security vulnerability

A security vulnerability exists in Oracle Purchasing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to access certain Oracle Purchasing data via HTTP, enabling unauthorized updates, insertions, o...

Oracle Commerce Platform security vulnerabilities

Oracle Commerce Platform 11.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the Dynamo Commerce Server component. They may allow low-privilege attackers with network HTTP access rights to unauthorizedly create, delete, or modify critical data or all accessible data, ...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Version 14.1.2.0.0 contains a security vulnerability. This vulnerability stems from issues with the Core component. It may allow low-privilege attackers with network access to attack via SOAP. This could result in unauthorized creation, deletion, or modification of...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from WebLogic component issues and are difficult to exploit. Unauthenticated attackers can access critical data or all accessible data via the TLS network. This allows...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Versions 12.2.1.4.0 and 14.1.2.0.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Core components, potentially allowing attackers with low privileges to access through the SOAP network and unauthorizedly read certain accessible data...

Oracle WebCenter Content security vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, as well as...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow low-privilege attackers to access through the HTTP network, potentially leading to unauthorized update...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to gain HTTP access, enabling them to create, delete, or modify critical data as well as all...

Oracle MySQL Connectors security vulnerabilities

Oracle MySQL Connectors version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Connector/Python component. Unauthorized attackers may gain network access through various protocols, potentially allowing them to access critical data or all accessible data...

Oracle Secure Backup security vulnerability

Versions 19.1.0.0.0 and 19.1.0.1.0 of Oracle Secure Backup contain a security vulnerability stemming from an issue in the NDMP daemon component. This vulnerability may allow unauthenticated attackers to access TCP-based networks and read certain accessible data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component and may allow low-privilege attackers to access certain accessible data via HTTP requests while interacting with users, thereby...