Simphony Enterprise Server Code Execution

The vulnerability of the Simphony Enterprise Server component of the Oracle Hospitality Simphony sales management platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Switcher extensions Information Disclosure

The vulnerability of the Browser Switcher extension in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information remotely...

Oracle Trade Management GL Accounts LOV Unauthorized Access

The vulnerability of the GL Accounts LOV component of the Oracle Trade Management software for trading operations management within the Oracle E-Business Suite is related to insufficient validation of input data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorize...

Undertow DoS

The vulnerability of the Undertow software package from Red Hat JBoss Enterprise Application Platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

PT-2024-4884 · Oracle · Oracle Commerce Platform

Name of the Vulnerable Software and Affected Versions: Oracle Commerce Platform versions 11.3.0 through 11.3.2 Description: The issue is related to insufficient input validation in the Oracle Commerce Platform, allowing an unauthenticated attacker with network access via HTTP to compromise the...

HP OfficeJet Pro DoS

The vulnerability of HP OfficeJet Pro printer’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Windows Standards-Based Storage Management Service DoS

The vulnerability of the Windows Standards-Based Storage Management service in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially created data...

ODBC Driver Windows Code Execution

The vulnerability of the ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-25994

An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only...

CVE-2023-28512

IBM Watson CP4D Data Stores 4.6.0, 4.6.1, and 4.6.2 could allow an attacker with specific knowledge about the system to manipulate data due to improper input validation. IBM X-Force ID: 250396...

Microsoft Printer Troubleshooting Code Execution

The vulnerability of the Microsoft Printer Metadata Troubleshooter Tool relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PayDroid Code Execution

The vulnerability of the PayDroid operating system exists due to insufficient checks on input data. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Oracle Knowledge Management Setup Sub-component Data Access

The vulnerability of the Setup sub-component and the Admin component of Oracle Knowledge Management, a system for automating business processes within the Oracle E-Business Suite, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating...

FeverWarn ESP32 RaspberryPi DataHub Command Execution

The vulnerabilities of the microprogramming software for thermal scanning systems—FeverWarn ESP32, FeverWarn RaspberryPi, and the FeverWarn DataHub RaspberryPi system for centralized data storage and management—are related to insufficient validation of input data. Exploiting these vulnerabilities...

Server Oracle MySQL DoS

The vulnerability of the Oracle MySQL Server component of the RAPID database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Oracle MySQL Server DoS

Vulnerability of the Server component: The Oracle MySQL Server component of the database management system has vulnerabilities related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause service interruptions...

OpenText AppBuilder Security Vulnerability

OpenText AppBuilder is an application from OpenText Canada. A security vulnerability exists in OpenText AppBuilder versions 21.2 through 23.2 that originates from incorrect input validation and allows probing of system files...

Mock chroot environment Code Execution

The vulnerability of the chroot environment manager used for creating RPM packages for Mock is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Atlassian Confluence Server Code Execution

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...