13524 matches found
CVE-2023-32194 Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'
A vulnerability has been identified when granting a create or global role for a resource type of "namespaces"; no matter the API group, the subject will receive permissions for core namespaces. This can lead to someone being capable of accessing, creating, updating, or deleting a namespace in the...
Malicious code in flormar-global (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in esbuild-plugin-global-externals (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9597 Malicious code in esbuild-plugin-global-externals (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-21283
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft component: Global Payroll for Core. Supported versions that are affected are 9.2.48-9.2.50. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2024-21190
Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...
CVE-2024-45461
The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In environments where the feature is enabled, due to missing access check enforcements, non-administrative CloudStack user accounts are able to acce...
CVE-2024-45461 Apache CloudStack Quota plugin: Access checks not enforced in Quota
The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In environments where the feature is enabled, due to missing access check enforcements, non-administrative CloudStack user accounts are able to acce...
CVE-2024-21283
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft component: Global Payroll for Core. Supported versions that are affected are 9.2.48-9.2.50. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2024-21283
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft component: Global Payroll for Core. Supported versions that are affected are 9.2.48-9.2.50. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2024-21190
Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...
CVE-2024-21190
Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...
CVE-2024-21283
CVE-2024-21283 affects Oracle PeopleSoft Enterprise HCM Global Payroll Core (component: Global Payroll for Core) and is observed in 9.2.48–9.2.50. Connected sources confirm an authorization weakness in the Global Payroll for Core that allows a low-privilege, network-access attacker (via HTTP) to ...
China Accuses U.S. of Fabricating Volt Typhoon to Hide Its Own Hacking Campaigns
China's National Computer Virus Emergency Response Center CVERC has doubled down on claims that the threat actor known as Volt Typhoon is a fabrication of the U.S. and its allies. The agency, in collaboration with the National Engineering Laboratory for Computer Virus Prevention Technology, went ...
CVE-2024-21283: Incorrect Authorization
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft component: Global Payroll for Core. Supported versions that are affected are 9.2.48-9.2.50. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2024-21190: Undefined Security Weakness
Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...
PT-2024-7083
Name of the Vulnerable Software and Affected Versions Oracle Global Lifecycle Management FMW Installer version 12.2.1.4.0 Description The issue is related to insufficient input validation in the Cloning component of the Oracle Global Lifecycle Management FMW Installer product. This allows an...
Oracle Fusion Middleware security vulnerabilities
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. A security vulnerability exists in Oracle Global Lifecycle Management...
Oracle PeopleSoft Enterprise HCM Global Payroll security vulnerabilities
Oracle PeopleSoft Enterprise HCM Global Payroll is a rules-based payroll calculation solution from Oracle Corporation Oracle. A security vulnerability exists in Oracle PeopleSoft Enterprise HCM Global Payroll versions 9.2.48 through 9.2.50. An attacker could exploit the vulnerability to create,...