Analytics Server component of DoS

The vulnerability of the Analytics Server component of the Oracle Business Intelligence Enterprise Edition software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to, modify, add, or delete data, or cause service interruptions...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2514)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JavaFX Component Data Compromise

The vulnerability of Oracle Java SE’s JavaFX software platforms is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

EulerOS Virtualization 3.0.6.0 : libxml2 (EulerOS-SA-2023-2504)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a...

EulerOS Virtualization 2.9.1 : libxml2 (EulerOS-SA-2023-2514)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a...

EulerOS Virtualization 2.9.0 : libxml2 (EulerOS-SA-2023-2527)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a...

Incorrect liquidity calculations if snapshot errors occur

Lines of code Vulnerability details Impact incorrect liquidity values that undermine the risk checks and constraints of the protocol Proof of Concept getHypotheticalAccountLiquidityInternal does not handle snapshot errors properly. Specifically: It calls MToken.getAccountSnapshot to get the...

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the MySQL database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Microsoft Edge Android Spoofing

The vulnerability of Microsoft Edge browser on Android is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

GraalVM Compiler Information Disclosure

The vulnerability of the GraalVM Compiler for Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK relates to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

Web Runtime SEC Resource Management Read Modify Data

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves errors in processing input data. Exploiting this vulnerability can allow an attacker to gain read access to data and modify it...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Active Directory Certificate Services Code Execution

The vulnerability of the Active Directory Certificate Services AD CS service, which manages the distribution and usage of certificates on Windows operating systems, is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute...

Remote Desktop Client Microsoft Windows Bypass

The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system relates to security configuration errors. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

Microsoft Edge Spoofing

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DNS Server Windows Code Execution

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...