HPE iLO Amplifier Pack 安全漏洞

HPE IlO Amplifier Pack is a database management software for use in clustered environments from HPE, USA. The software supports Gen8, Gen9 and Gen10 Hewlett Packard Enterprise automatic firmware, driver updates, manual or automatic recovery of firmware-corrupted systems, maximizing cluster...

CVE-2021-25939

In ArangoDB, versions v3.7.0 through v3.9.0-alpha.1 have a feature which allows downloading a Foxx service from a publicly available URL. This feature does not enforce proper filtering of requests performed internally, which can be abused by a highly-privileged attacker to perform blind SSRF and...

CVE-2021-25939

In ArangoDB, versions v3.7.0 through v3.9.0-alpha.1 have a feature which allows downloading a Foxx service from a publicly available URL. This feature does not enforce proper filtering of requests performed internally, which can be abused by a highly-privileged attacker to perform blind SSRF and...

Oracle Communications 安全漏洞

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation. Oracle Communications has a security vulnerability in Oracle Communications Operations Monitor tha...

PT-2021-6990 · Oracle +1 · Oracle Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 8.0.28 and prior Description: The issue is related to insufficient input validation in the Oracle MySQL Cluster component. It may allow an attacker to gain full control over the application using various network...

Oracle MySQL Cluster Input Validation Error Vulnerability (CNVD-2021-89939)

MySQL Cluster is a write-scalable, real-time, ACID-compatible transactional database designed to guarantee 99.999% availability. A security vulnerability exists in the Cluster: General component of MySQL Cluster 7.4.33, 7.5.23, 7.6.19, 8.0.26 and earlier versions. An attacker could exploit this...

Oracle Financial Services Crime and Compliance Investigation Hub has an unspecified vulnerability

Oracle Financial Services Crime and Compliance Investigation Hub, an end-user application for comprehensive financial crime investigations, has a security vulnerability in the Reports component of Oracle Financial Services Crime and Compliance A security vulnerability exists in the Reports...

OpenEMR 5.0.2 < 6.0.0.1 Multiple XSS Vulnerabilities

OpenEMR is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wordpress Easy Redirect Manager SQL注入漏洞

Wordpress Easy Redirect Manager is Wordpress an open source application plugin. Provides a management and creation of WordPress website 301, 302, 307 redirects to improve SEO and visitor experience features. A SQL injection vulnerability exists in versions of the Easy Redirect Manager plugin prio...

(0Day) Lepide Active Directory Self Service Unsafe Interaction Authentication Bypass Vulnerability

This vulnerability allows physical or remote attackers to bypass the Windows login screen on affected installations of Lepide Active Directory Self Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within the "Reset Password / Unlock Account" feature...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2021-08016)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle Virtualization 组件访问控制错误漏洞

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle Virtualization组件访问控制错误漏洞

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Advice for incident responders on recovery from systemic identity compromises

As Microsoft alongside our industry partners and the security community continues to investigate the extent of the Solorigate attack, our goal is to provide the latest threat intelligence including IOCs and guidance across our products and solutions to help the community fight back against, harde...

Unspecified Vulnerability in Oracle Hyperion Infrastructure Technology UI and Visualization Components

Oracle Hyperion Infrastructure Technology is a financial analytics product from Oracle Corporation USA. A security vulnerability exists in the Oracle Hyperion Infrastructure Technology UI and Visualization components that could allow a highly privileged attacker to compromise Hyperion...

UBUNTU-CVE-2019-2968

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

MariaDB 10.2.0 < 10.2.22 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.22. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.22 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are...

smart_proxy_dynflow gem authentication bypass in Foreman remote execution feature

An authentication bypass flaw was found in the smartproxydynflow component used by Foreman. A malicious attacker can use this flaw to remotely execute arbitrary commands on machines managed by vulnerable Foreman instances, in a highly privileged context...

Input validation

A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to perform a denial of service DoS attack against an affected system. The vulnerability is due to insufficient validation of user-provided input...

CVE-2018-0462 Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability

A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to perform a denial of service DoS attack against an affected system. The vulnerability is due to insufficient validation of user-provided input...