The vulnerability of the software tools for optimizing production processes in Location Intelligence Perpetual Large, Perpetual Medium, Perpetual Non-Prod, Perpetual Small, SUS Large, SUS Medium, SUS Non-Prod, and SUS Small lies in their reliance on pre-installed database data. This allows attackers to gain full access to the software tools.

The vulnerability of the software tools for optimizing production processes in Location Intelligence Perpetual Large, Perpetual Medium, Perpetual Non-Prod, Perpetual Small, SUS Large, SUS Medium, SUS Non-Prod, and SUS Small is related to the use of pre-installed configuration data. Exploiting thi...

PT-2024-1621 · Unknown · Location Intelligence Sus Non-Prod +7

Name of the Vulnerable Software and Affected Versions: Location Intelligence Perpetual Large versions prior to V4.3 Location Intelligence Perpetual Medium versions prior to V4.3 Location Intelligence Perpetual Non-Prod versions prior to V4.3 Location Intelligence Perpetual Small versions prior to...

Microsoft Azure File Sync Agent Installed (Windows)

Binary data microsoftazurefilesyncagentwininstalled.nbin...

The vulnerability of the Vinchin Backup & Recovery software for backup and restoration operations, related to the use of pre-installed user accounts, allows a hacker to elevate their privileges to the level of a root user.

The vulnerability of the Vinchin Backup & Recovery software regarding backup and restoration is related to the use of pre-installed user accounts. Exploiting this vulnerability allows a malicious actor to elevate their privileges to root-level by connecting with the default SSH account...

RHEL 8 : thunderbird (RHSA-2024:0565)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:0565 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.7.0. Security Fixes: Mozilla:...

Fedora 39 : sudo (2024-cdccda4f62)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-cdccda4f62 advisory. Rabase to 1.9.15p5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 38 : chromium (2024-e42978d12c)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e42978d12c advisory. update to 121.0.6167.85 High CVE-2024-0807: Use after free in WebAudio High CVE-2024-0812: Inappropriate implementation in Accessibility High...

The vulnerability of the HTML UI component of the Oracle Installed Base information storage center in the Oracle E-Business Suite allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the HTML UI component of the Oracle Installed Base information storage center in the Oracle E-Business Suite relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to read, modify, add, or delete data using the HTT...

Vulnerability of the sub-component: Engineering Change Order for the Oracle Installed Base component of the Oracle E-Business Suite. This component allows an attacker to read, modify, add, or delete data.

The vulnerability of the Engineering Change Order component of the Oracle Installed Base system, a component of the Oracle E-Business Suite, relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain access to read, modify, add, or delete data...

The vulnerability of the sub-component “Engineering Change Order” of the Oracle Installed Base component in the Oracle E-Business Suite system, which allows a malicious actor to gain access to read, modify, add, or delete data.

The vulnerability of the Engineering Change Order component of the Oracle Installed Base component in the Oracle E-Business Suite system exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify...

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications lies in the use of pre-installed user accounts, which allows attackers to expose sensitive information that should be protected.

The vulnerability of the software for managing and controlling access to corporate resources and applications of IBM Security Verify Governance is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Vulnerabilities fixed in Oracle E-Business Suite

Oracle has fixed vulnerabilities in E-Business suite and components. A malicious party could exploit the vulnerabilities to perform attacks that could result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data Access to sensitive data Oracle...

UltraVNC Installed (Windows)

Binary data ultravncwininstalled.nbin...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

CVE-2024-20934

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...

CVE-2024-20934

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...

CVE-2024-20934

CVE-2024-20934 affects Oracle E-Business Suite, Oracle Installed Base (Engineering Change Order) with versions 12.2.3–12.2.13. The vulnerability permits an unauthenticated, network-exposed attacker (HTTP) to manipulate or read Oracle Installed Base data, requiring user interaction for exploitatio...