Document Management Sub-component Oracle E-Business Suite Unauthorized Access Disclosure

The vulnerability of the Document Management sub-component of the Oracle Document Management and Collaboration component in the Oracle E-Business Suite system relates to coding errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the devi...

Visual Basic Runtime Privilege Bypass

The vulnerability of the Visual Basic Runtime environment for Yokogawa software products is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Snort Intrusion Detection System Cisco Firepower Threat Defense

The vulnerability of the Snort intrusion detection system of Cisco Firepower Threat Defense FTD, as well as Cisco Catalyst network devices, ISR and ISA routers, and the integrated-service virtual router ISRv, is related to security configuration errors. Exploiting this vulnerability can allow a...

Pulse Connect Secure Authentication Code Execution

The vulnerability of the Pulse Connect Secure VPN server for corporate networks is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Cisco Adaptive Security Appliance Session Timeout

The vulnerability of Microprogrammed Network Interface Software of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD is related to session timeout errors. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service...

Thunderbird Synchronization Bypass

The vulnerability of the Thunderbird email client arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

Oracle Customers Online Customer Tab Unauthenticated Access Disclosure

The vulnerability of the Customer Tab sub-component of the Oracle Customers Online component of the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device and disclose protected...

CVE-2021-1489

A vulnerability in filesystem usage management for Cisco Firepower Device Manager FDM Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service DoS condition on an affected device. This vulnerability is due to the insufficient...

CVE-2021-1489 Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability

A vulnerability in filesystem usage management for Cisco Firepower Device Manager FDM Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service DoS condition on an affected device. This vulnerability is due to the insufficient...

WordPress WPGraphQL 1.3.5 Denial Of Service

Exploit Title: WordPress Plugin WPGraphQL 1.3.5 - Denial of Service Author: Dolev Farhi Date: 2021-04-12 Vendor Homepage: https://www.wpgraphql.com/ Version: 1.3.5 Tested on: Ubuntu """ This attack uses duplication of fields amplified by GraphQL batched queries, resulting in server OOM and MySQL...

WPGraphQL < 1.3.6 - Denial of Service

The plugin suffers from a Denial of Service vulnerability by Field Duplication. It is possible to create an expensive query by duplicating the number of fields, while simultaneously sending these requests in batches using GraphQL's Batching capability. v1.3.6 added a setting to disable batch...

Microsoft Azure Active Directory Security Configuration Error

The vulnerability of the Microsoft Azure Active Directory software platform is related to security configuration errors. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Windows Speech Runtime Privilege Escalation

The vulnerability of the Windows Speech Runtime component in Microsoft Windows systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Security update for nim (moderate)

openSUSE Security Update: Security update for nim Announcement ID: openSUSE-SU-2021:0618-1 Rating: moderate References: 1185083 1185084 1185085 Cross-References: CVE-2021-21372 CVE-2021-21373 CVE-2021-21374 CVSS scores: CVE-2021-21374 NVD : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affecte...

OPENSUSE-SU-2021:0598-1 Security update for shim

This update for shim fixes the following issues: - Updated openSUSE x86 signature - Avoid the error message during linux system boot boo1184454 - Prevent the build id being added to the binary. That can cause issues with the signature Update to 15.4 boo1182057 + Rename the SBAT variable and fix t...

PT-2021-30915

Уязвимость среды выполнения Visual Basic Runtime программных продуктов Yokogawa связана с ошибками управления привилегиями. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

Kaspersky RCE

The vulnerability of components such as Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud, Kaspersky Small Office Security, and Kaspersky Endpoint Security for Windows relates to errors in permission and privilege management. Exploiting this...

Windows Speech Runtime Privilege Escalation

The vulnerability of the Windows Graphics Device Interface Plus GDI+ component in operating systems involves privilege management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Citrix Receiver Does Not Respond When Opening Applications to XenApp Servers

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When opening applications to XenApp servers, there is no response at the Launching… prompt, as shown...

Linux kernel UMD DoS

The vulnerability of the User Mode Driver UMD of the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...