2709 matches found
PT-2021-1889
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the APIs component of Oracle Installed Base, allowing an...
Oracle E-Business Suite Component Security Vulnerability
Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management, etc. Installed Base is one of the installed base components. A security...
The vulnerability of D-Link DSL-2640B router software lies in the use of pre-installed credentials, which allows attackers to increase their privileges.
The vulnerability of D-Link DSL-2640B router software is related to the use of pre-installed credentials. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
Fedora 32 : roundcubemail (2021-2cb0643316)
The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-2cb0643316 advisory. - An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text...
Fedora: Security Advisory for libdb (FEDORA-2020-62d2ff9fa8)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Adobe Prelude Installed (macOS)
Binary data macosadobepreludeinstalled.nbin...
The vulnerability of the components term.arh and core.arh of the EKRA 200 microprocessor series allows a hacker to access confidential information and create new configuration files.
The vulnerability of the term.arh and core.arh components of the EKRA microprogramming system lies in the presence of pre-installed registration data. Exploiting this vulnerability can allow attackers to access confidential information and create new configuration files...
CVE-2020-25265
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
Path traversal
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
CVE-2020-25265
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
CVE-2020-25265
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
CVE-2020-25265
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
CVE-2020-25265: Undefined Security Weakness
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
Middleware Configuration Detection (Linux / Unix)
Binary data middlewareconfignixinstalled.nbin...
IBM WebSphere Application Server Installed (Linux)
Binary data ibmwebsphereapplicationservernixinstalled.nbin...
The vulnerability of the APIs of the Oracle Installed Base information storage center component in the Oracle E-Business Suite, which allows a perpetrator to access, modify, add, or delete data.
The vulnerability of the APIs of the Oracle Installed Base information storage center in the Oracle E-Business Suite relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data using the...
DEBIAN-CVE-2020-28037
isbloginstalled in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution as well as a denial of service for the old installation...
KB4577586: Update for the removal of Adobe Flash Player: October 27, 2020
None None...