PT-2023-2591 · Cisco · Cisco Nexus Dashboard

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard affected versions not specified Description: The issue is related to the web-based management interface of Cisco Nexus Dashboard, where insufficient user input validation allows for cross-site scripting XSS attacks. An...

PT-2023-1395 · Microsoft · 3D Builder

Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to insufficient input validation in the 3D Builder program, which can be exploited by an attacker to execute arbitrary code using a specially crafted file. This can...

PT-2023-1447 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can be exploited by a remote attacker to cause a denial of service. Recommendations: ...

PT-2023-1527 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the database management system, allowing a remote attacker to execute arbitrary code. This can affect the system...

PT-2023-1432 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to insufficient input validation in Azure DevOps Server, which can be exploited by a remote attacker to execute arbitrary code using a specially crafted fil...

PT-2023-1449 · Microsoft · Wdac Ole Db Provider For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft WDAC OLE DB provider for SQL Server, which can be exploited by remote attackers ...

PT-2023-1454 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the database management system, which can be exploited to execute arbitrary code. This allows an attacker to potentiall...

The vulnerability of Eclipse Jetty servlet containers arises from insufficient validation of input data, allowing attackers to cause failures in the proxy script.

The vulnerability of Eclipse Jetty servlet containers exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause failures in the proxy scenarios...

The vulnerability of the Synchronization sub-component of the Oracle Mobile Field Service component in the Oracle E-Business Suite system allows a perpetrator to gain access to modify, add, or delete protected data.

The vulnerability of the Synchronization sub-component of the Oracle Mobile Field Service component in the Oracle E-Business Suite enterprise automation system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker who operates remotely to modify,...

The vulnerability of the Authentication Engine component of the Oracle Access Manager control system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the E-Business Collections component of the Oracle Demantra Demand Management demand management platform, which allows a fraudster to manipulate data.

The vulnerability of the E-Business Collections component of the Oracle Demantra Demand Management demand management platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to manipulate data remotely...

The vulnerability of the sub-component of the Automated Test Suite of the Oracle HCM Common Architecture component of the Oracle E-Business Suite allows a perpetrator to manipulate data.

The vulnerability of the sub-component of the Automated Test Suite of the Oracle HCM Common Architecture in the Oracle E-Business Suite system relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to manipulate data remotely...

The vulnerability of the Security component of the Oracle BI Publisher software, a software platform of Oracle Fusion Middleware, allows a perpetrator to execute arbitrary code.

The vulnerability of the Security component of the Oracle BI Publisher software platform for Oracle Fusion Middleware is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Core server component of Oracle Communications Converged Application Server allows a hacker to gain full control over the application.

The vulnerability of the Core server component of Oracle Communications Converged Application Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application using the UDP network protocol...

The vulnerability of the Windows Internet Key Exchange (IKE) extension on Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Internet Key Exchange IKE extension in Windows operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially created packages...

PT-2023-1250 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris versions 10 through 11 Description: The issue is related to insufficient input validation in the NSSwitch component of Oracle Solaris. It allows a high-privileged attacker with network access via multiple protocols to compromis...

PT-2023-1268 · Oracle · Oracle Database

Name of the Vulnerable Software and Affected Versions: Oracle Database versions 19c through 21c Description: The issue is related to insufficient input validation in the Oracle Database RDBMS Security component. It allows a low-privileged attacker with Create Session privilege and network access...

PT-2023-1248 · Oracle · Peoplesoft Enterprise Peopletools

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools version 8.60 Description: The issue is related to insufficient input validation in the Panel Processor component. It allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2023-1241 · Oracle · Oracle Web Services Manager

Name of the Vulnerable Software and Affected Versions: Oracle Web Services Manager version 12.2.1.4.0 Description: The issue is related to insufficient input validation in the XML Security component of Oracle Web Services Manager, part of Oracle Fusion Middleware. This easily exploitable flaw...

PT-2023-1224 · Oracle · Oracle Demantra Demand Management

Name of the Vulnerable Software and Affected Versions: Oracle Demantra Demand Management versions 12.1 through 12.2 Description: The issue is related to insufficient input validation in the E-Business Collections component of Oracle Demantra Demand Management, allowing an unauthenticated attacker...