The vulnerability of JunOS operating systems’ routers, such as SRX1500, SRX4100, SRX4200, SRX4600, and SRX5000 with SPC2, and SRX5000 with SPC2/SPC3, vSRX, is related to privilege management errors. This vulnerability allows attackers to escalate their privileges.

The vulnerability of JunOS operating systems’ routers, such as SRX1500, SRX4100, SRX4200, SRX4600, and SRX5000 with SPC2, SRX5000 with SPC2/SPC3, and vSRX, is related to privilege management errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Advanced Global Intercompany sub-component of the Oracle Financials Common Modules in the Oracle E-Business Suite system allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Advanced Global Intercompany component of the Oracle Financials Common Modules in the Oracle E-Business Suite system is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP...

The vulnerability of the India Localization sub-component and the Results component of Oracle Payables in the Oracle E-Business Suite automation system allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the India Localization sub-component and the Results component of Oracle Payables in the Oracle E-Business Suite system are related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP...

The vulnerability of the Setup sub-component of the Oracle Enterprise Asset Management component in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Setup sub-component of the Oracle Enterprise Asset Management component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...

The vulnerability of the sub-components “Loan Details” and “Loan Accounting Events” of the Oracle Loans component in the Oracle E-Business Suite, a business automation system, allows a malicious individual to gain unauthorized access to the device.

The vulnerability of the Loan Details and Loan Accounting Events subcomponents of the Oracle Loans component in the Oracle E-Business Suite is related to code errors. Exploitation of this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HT...

Vulnerability of the sub-component of the French HR component of the Oracle HRMS system, a business automation system from Oracle E-Business Suite. This component allows unauthorized access by attackers to devices.

The vulnerability of the sub-component of the French HR component of the Oracle HRMS system, a business automation system from Oracle’s E-Business Suite, is related to code errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device...

The vulnerability of Web Render components in the Firefox web browser allows a hacker to execute arbitrary code within the system.

The vulnerability of Web Render components in the Firefox web browser arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system...

CVE-2020-4536

IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182907...

CVE-2021-27574

An issue was discovered in Emote Remote Mouse through 4.0.0.0. It uses cleartext HTTP to check, and request, updates. Thus, attackers can machine-in-the-middle a victim to download a malicious binary in place of the real update, with no SSL errors or warnings...

Design/Logic Flaw

An issue was discovered in Emote Remote Mouse through 4.0.0.0. It uses cleartext HTTP to check, and request, updates. Thus, attackers can machine-in-the-middle a victim to download a malicious binary in place of the real update, with no SSL errors or warnings...

CVE-2021-27574

An issue was discovered in Emote Remote Mouse through 4.0.0.0. It uses cleartext HTTP to check, and request, updates. Thus, attackers can machine-in-the-middle a victim to download a malicious binary in place of the real update, with no SSL errors or warnings...

PT-2021-6997 · Oracle +9 · Mysql Server +8

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.37 and prior MySQL Server versions 8.0.28 and prior Description: The issue is related to errors in resource release in the InnoDB component of the MySQL Server system. Exploitation of this issue can allow a remote...

CVE-2021-24214

The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when output back in the login form, leading to a reflected Cross-Site Scripting issue. This issue does not require authentication and can be exploited with the default configuration...

OESA-2021-1160 pdfbox security update

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...

PT-2021-2883

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 88.0.1 Firefox for Android versions prior to 88.1.3 Description The issue is caused by synchronization errors when using shared resources in the Web Render components of the Firefox web browser. This could lead to...

The vulnerability of the Thunderbird email client, caused by synchronization errors when using a shared resource, allows attackers to circumvent existing security restrictions.

The vulnerability of the Thunderbird email client arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of the Customer Tab sub-component of the Oracle Customers Online component of the Oracle E-Business Suite allows a malicious actor to gain unauthorized access to the device and disclose protected information.

The vulnerability of the Customer Tab sub-component of the Oracle Customers Online component of the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device and disclose protected...

The vulnerability of the Document Management sub-component of the Oracle Document Management and Collaboration system, a business automation solution from Oracle E-Business Suite, allows an intruder to gain unauthorized access to the device and disclose protected information.

The vulnerability of the Document Management sub-component of the Oracle Document Management and Collaboration component in the Oracle E-Business Suite system relates to coding errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the devi...

The vulnerability of the Snort intrusion detection system of Cisco Firepower Threat Defense (FTD), which includes network devices like Cisco Catalyst, routers such as ISR and ISA, and the virtual router with integrated ISRv services, allows attackers to compromise the integrity of protected information.

The vulnerability of the Snort intrusion detection system of Cisco Firepower Threat Defense FTD, as well as Cisco Catalyst network devices, ISR and ISA routers, and the integrated-service virtual router ISRv, is related to security configuration errors. Exploiting this vulnerability can allow a...

The vulnerability of distributed control systems like CENTUM, related to access control errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of distributed control systems like CENTUM is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...