Oracle Purchasing security vulnerability

A security vulnerability exists in Oracle Purchasing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the PO View Document component and may allow low-privilege attackers to gain unauthorized access via HTTP, resulting in unauthorized access to critical data or full...

Oracle JDeveloper security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle JDeveloper contain a security vulnerability stemming from issues with the Java Business Objects component. This vulnerability may allow unauthenticated attackers to gain HTTP access, enabling them to create, delete, or modify critical data or any other...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and is difficult to exploit. However, it may allow attackers with low privileges who can log in to JD...

Apple macOS Security Vulnerabilities

Versions of Apple macOS Golden Gate prior to version 27 contain security vulnerabilities. These vulnerabilities stem from improper configuration of additional authorizations, which may allow applications access to sensitive user data...

Oracle Communications Billing and Revenue Management security vulnerability

Versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 of Oracle Communications Billing and Revenue Management contain a security vulnerability stemming from issues within the BRM Server component. Unauthenticated attackers can access these systems via the TLS network, potentially leading to...

CodeWithCJ SparkyFitness Authorization Issue Vulnerability

Versions of CodeWithCJ SparkyFitness prior to 0.17.0 have a vulnerability related to authorization. This vulnerability arises from a lack of authorization checks. Authorized attackers can use the DELETE /api/foods/food-variants/:id endpoint to delete food variants for other users. They can also u...

Oracle iProcurement security vulnerability

A security vulnerability exists in Oracle iProcurement versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow unauthenticated attackers to access, create, delete, or modify critical data or all data, as well as view critical da...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities stem from issues with the...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities stem from issues with the JSSE component and...

Oracle Agile Product Lifecycle Management For Process authorization issue vulnerability

Oracle Agile Product Lifecycle Management for Process version 6.2.4 contains an authorization issue vulnerability. This vulnerability stems from issues within the Product Quality Management component and may allow unauthenticated attackers to create, delete, or modify critical data or all...

TYPO3 sgalinski Cookie Consent Authorization Vulnerability

TYPO3 versions prior to 8.0.0 through 8.1.12 and 7.4.6 contain an authorization vulnerability. This vulnerability stems from the fact that the function for providing consent and statistical data does not check whether the backend users have permission to access the requested modules or pages. As ...

Oracle JD Edwards EnterpriseOne Human Resources Management security vulnerabilities

Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 has a security vulnerability. This vulnerability stems from issues with the Human Resources component. It may allow low-privilege attackers to access through the JDENET network, enabling them to update, insert, or delete certa...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers with network access to unauthorizedly update, insert, or...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from WebLogic component issues and are difficult to exploit. Attackers who are unauthenticated and have access to the physical communication segments connected to the PeopleSof...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1. These vulnerabilities stem...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, including the MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1; as well as MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, contain security vulnerabilities. These vulnerabilities stem from issues with t...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from an issue in the LDAP component and may allow low-privilege attackers to log in and execute infrastructure tasks. It also enables unauthorized updates, insertions, ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Query component and may allow attackers with limited privileges to access certain accessible data via HTTP without authorization...

Oracle Timesten In-memory Database security vulnerability

A security vulnerability exists in Oracle Timesten In-memory Database versions 26.1 through 26.1.1.3.0. This vulnerability stems from issues within the TimesTen IMDB component and is difficult to exploit. Privileged attackers who gain access to the infrastructure can perform unauthorized updates,...

Oracle Compensation Workbench security vulnerability

A security vulnerability exists in Oracle Compensation Workbench versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Total Compensation Statement component and may allow low-privilege attackers to perform unauthorized updates, insertions, or deletions of certain data,...