Nagios XI autodiscovery_component Command Injection (CVE-2020-28648)

A command injection vulnerability exists in Nagios XI. The vulnerability is due to insufficient input validation of the requests submitted to the Auto-Discovery endpoint...

Kaspersky TinyCheck Command Injection Vulnerability

Kaspersky TinyCheck is a software from the Russian company Kaspersky that captures network communications from smartphones or any device that can be associated with a Wi-Fi access point. TinyCheck before commits 9fd360d and ea53de8 suffers from a command injection vulnerability that stems from...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Core component in Oracle VM VirtualBox allows a attacker to compromise data integrity.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to trigger a service failure.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2021-09947)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A cross-site scripting vulnerability exists in the Web management interface of Cis...

Cisco Data Center Network Manager SQL Injection Vulnerability (CNVD-2021-09306)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A SQL injection vulnerability exists in the REST API endpoint of Cisco Data Center...

PT-2021-1923 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center affected versions not specified Description: A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The issue is due to insufficient...

PT-2021-1906

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0 Description The issue is due to insufficient input validation in the Analytics Web General component. It allows an unauthenticated...

PT-2021-1760

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.10 Description The issue is related to insufficient input validation in the Oracle CRM Technical Foundation product, allowing an unauthenticated attacker with network access via...

PT-2021-1913

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to insufficient input validation in the Tasks component of the Oracle Common Applications Calendar product. This allows an unauthenticated attacker with...

PT-2021-1790

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description: The issue exists due to insufficient input validation in the Portal component of PeopleSoft Enterprise PeopleTools. This allows a remote attacker to gain read access to...

PT-2021-1761

Name of the Vulnerable Software and Affected Versions: Oracle iSupport versions 12.1.1 through 12.1.3 Oracle iSupport versions 12.2.3 through 12.2.10 Description: The issue is related to insufficient input validation in the User Responsibilities component of Oracle iSupport, allowing an...

PT-2021-1813 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1868 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1652

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.18 Description: The issue exists due to insufficient input validation in the Core component of Oracle VM VirtualBox. Exploitation of this issue can allow an attacker to impact the confidentiality and...

PT-2021-1644

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.18 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a highly privileged attacker with logon access to the infrastructure wher...

PT-2021-1763

Name of the Vulnerable Software and Affected Versions: Oracle Configurator versions 12.1 and 12.2 Description: The issue is related to insufficient input validation in the UI Servlet component of Oracle Configurator, allowing an unauthenticated attacker with network access via HTTP to compromise...

PT-2021-1670

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 6.1.18 Description The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a highly privileged attacker with logon to the infrastructure to compromise...

PT-2021-1651

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.18 Description: The issue exists due to insufficient input validation in the Core component of Oracle VM VirtualBox. Exploitation of this issue may allow an attacker to cause a denial of service,...