CVE-2022-21582: Undefined Security Weakness

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

CVE-2022-21586: Improper Access Control

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

PT-2022-4689

Name of the Vulnerable Software and Affected Versions Oracle Communications Billing and Revenue Management versions 12.0.0.4.0 through 12.0.0.6.0 Oracle Banking Trade Finance affected versions not specified Description The issue is related to insufficient input validation in the Infrastructure...

PT-2022-4642

Name of the Vulnerable Software and Affected Versions Oracle Banking Trade Finance version 14.5 Description The issue exists due to insufficient input validation in the Infrastructure component of Oracle Banking Trade Finance, allowing a remote attacker to create, delete, or modify access to...

PT-2022-4685

Name of the Vulnerable Software and Affected Versions Oracle Banking Trade Finance version 14.5 Description The issue exists due to insufficient input validation in the Infrastructure component of Oracle Banking Trade Finance, allowing a remote attacker to read, modify, add, or delete data via th...

Oracle Financial Services Applications 输入验证错误漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The products include core banking, online banking and property management, etc. FLEXCUBE Universal Banking is one of the Internet and mobile banking solution components. An input validation error...

Oracle Financial Services Applications 输入验证错误漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and property management. An input validation error vulnerability exists in Oracle Banking Trade Finance component: Infrastructure version 14.5, whic...

Oracle Financial Services Applications 输入验证错误漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and property management. An input validation error vulnerability exists in Oracle Banking Trade Finance component: Infrastructure version 14.5, whic...

Oracle Financial Services Applications 输入验证错误漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and property management. An input validation error vulnerability exists in Oracle Banking Trade Finance component: Infrastructure version 14.5, whic...

CVE-2022-21584: Undefined Security Weakness

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

PT-2022-4694

Name of the Vulnerable Software and Affected Versions Oracle Banking Trade Finance version 14.5 Description The issue exists due to insufficient input validation in the Infrastructure component of Oracle Banking Trade Finance, allowing a remote attacker to gain unauthorized access to read, modify...

hospitality-finance.com Cross Site Scripting vulnerability OBB-2787525

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

financetrust.co.ug Cross Site Scripting vulnerability OBB-2776061

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mismatch in withdraw() between Yearn and other protocols can prevent Users from redeeming zcTokens and permanently lock funds

Lines of code Vulnerability details Impact As defined in the docs for Euler, ERC4626, Compound and Aave, when withdrawing and depositing funds the amount specified corresponds excactly to how many of the underlying assets are deposited or withdrawn. However, as specified by Yearn, the yearn...

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software allows a perpetrator to create, delete, or alter access to critical data, gain read-only access to data, or cause partial service disruption.

The vulnerability of Oracle Banking Trade Finance’s Infrastructure component is related to errors in the code. Exploiting this vulnerability allows a malicious actor to create, delete, or alter access to critical data, gain read-only access to data, or cause partial service interruptions through...

Oracle may be attacked if an attacker can pump the tokens for the entire block

Lines of code Vulnerability details Impact Attacker may use huge amount of their fund to pump the token in a liquidity pair for one entire block. The oracle will capture the manipulated price as current TWAP implementation may only cover 1 block if timed correctly. First block on every periodSize...

MAL-2022-6782 Malicious code in union-finance-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 864f2a7a59e93388fda46cda69a405d50e420ee9a3e50c40af312175b6a08850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in union-finance-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 864f2a7a59e93388fda46cda69a405d50e420ee9a3e50c40af312175b6a08850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-221 Malicious code in @e-finance/e-finance-tms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 699d70f7539e2ca2a7c611b3efdf3a3476cf035fcb60c860b581acb445e290fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @e-finance/e-finance-tms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 699d70f7539e2ca2a7c611b3efdf3a3476cf035fcb60c860b581acb445e290fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...