2708 matches found
SolarWinds Access Rights Manager (ARM) Installed (Windows)
Binary data solarwindsarmwininstalled.nbin...
Fedora 38 : freeglut (2024-0356803680)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-0356803680 advisory. Patch for CVE-2024-24258 and CVE-2024-24259 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
The vulnerability of Schneider Electric EcoStruxure IT Gateway’s software for communicating with controlled devices stems from the use of pre-installed credentials. This allows a perpetrator to escalate their privileges.
The vulnerability of Schneider Electric EcoStruxure IT Gateway software for communication with controlled devices is related to the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2024-20958
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed...
CVE-2024-20958
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed...
CVE-2024-20941
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: HTML UI. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful...
CVE-2024-20935
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...
CVE-2024-20933
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...
Design/Logic Flaw
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...
Design/Logic Flaw
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: HTML UI. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful...
CVE-2024-20958
CVE-2024-20958 affects Oracle E-Business Suite, specifically Oracle Installed Base (Engineering Change Order) in versions 12.2.3–12.2.13. The root cause is insufficient input validation in Engineering Change Order within Installed Base, enabling a low-privilege, network-accessible attacker to lev...
CVE-2024-20933
CVE-2024-20933 affects Oracle E-Business Suite – Oracle Installed Base (Engineering Change Order) with affected versions 12.2.3–12.2.13. The vulnerability allows an unauthenticated attacker over HTTP to compromise Oracle Installed Base, with attacks requiring user interaction, and potentially lea...
CVE-2024-20958: Undefined Security Weakness
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed...
CVE-2024-20935: Undefined Security Weakness
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...
CVE-2024-20933: Cross-Site Request Forgery (CSRF)
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...
CVE-2024-20941: Out-of-bounds Read
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: HTML UI. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful...
Intel Extreme Tuning Utility Installed (Windows)
Binary data intelxtuwininstalled.nbin...
The vulnerability of the software tools for optimizing production processes in Location Intelligence Perpetual Large, Perpetual Medium, Perpetual Non-Prod, Perpetual Small, SUS Large, SUS Medium, SUS Non-Prod, and SUS Small lies in their reliance on pre-installed database data. This allows attackers to gain full access to the software tools.
The vulnerability of the software tools for optimizing production processes in Location Intelligence Perpetual Large, Perpetual Medium, Perpetual Non-Prod, Perpetual Small, SUS Large, SUS Medium, SUS Non-Prod, and SUS Small is related to the use of pre-installed configuration data. Exploiting thi...
PT-2024-1621 · Unknown · Location Intelligence Sus Non-Prod +7
Name of the Vulnerable Software and Affected Versions: Location Intelligence Perpetual Large versions prior to V4.3 Location Intelligence Perpetual Medium versions prior to V4.3 Location Intelligence Perpetual Non-Prod versions prior to V4.3 Location Intelligence Perpetual Small versions prior to...