Monitoring and Diagnostics Component Information Disclosure

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools in the enterprise resource management system exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to access confidential information...

OFSAAI Component Data Access

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure OFSAAI business analytics platform is related to insufficient validation of input data. Exploitation of this vulnerability could allow a malicious actor to gain read, modify, ...

USB 3.0 HUB Driver Code Execution

The vulnerability of the USB 3.0 HUB driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Ubiquiti EdgeRouter NAT Configuration Handler Command Execution

The vulnerability of the NAT Configuration Handler component in Ubiquiti EdgeRouter software exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Opera Hospitality Opera Code Execution

The vulnerability of the Opera software component used for managing hospitality resources in Oracle Hospitality Opera 5 is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows Message Queuing Code Execution

The vulnerability of Windows’ Message Queuing system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

MediaTek microprogramming software DoS

The vulnerability of MediaTek’s microprogramming software relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

3D viewer Code Execution

The vulnerability of the 3D viewer software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Identity Linux Broker Code Execution

The vulnerability of the Linux system integration tool in the Microsoft Identity Linux Broker environment is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

Google GRPC Remote Procedure Call DoS

The vulnerability of Google GRPC process callouts is related to insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Google GRPC Remote Procedure Call DoS

The vulnerability of Google GRPC process callouts is related to insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2023-20205

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device...

CVE-2023-20017

Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands using root-level privileges. The attacker would need to have Administrator privileges on the affected device to exploit these vulnerabilities. These...

DEBIAN-CVE-2023-39950

efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets. Insufficient or missing validation and sanitization of input from untrustworthy bootloader environment files can cause crashes and probably also code injections into bgsetenv or...

Oracle Database Server Access Modification

The vulnerability of the Advanced Networking Option component of the Oracle Database Server management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain read, modify, add, or delete access to data...

Oracle Java SE Keytool Data Access

The vulnerability of the Keytool component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data...

ThinkPad Hybrid USB-C USB-A Dock Code Execution

The vulnerability of the ThinkPad Hybrid USB-C with USB-A Dock’s microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute code with elevated privileges during package updates or installations...

Rockwell Automation ArmorStart ST XSS

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to deficiencies in the validation of user-input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

CVE-2023-20077

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. These vulnerabilities are due to insufficient input validation. An attacker cou...

CVE-2023-20722

In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07771518; Issue ID: ALPS07680084...