4704 matches found
PT-2024-12310
Name of the Vulnerable Software and Affected Versions OpenText Application Lifecycle Management ALM, Quality Center versions 15.00 through 16.01 P1 Description The issue allows a user to archive malicious DLLs on the system prior to installation, enabling code inclusion via an untrusted search...
CVE-2024-21278
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award Processes. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2024-21278
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award Processes. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2024-21190
Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...
CVE-2024-21190
Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...
CVE-2024-21278
CVE-2024-21278 affects Oracle E-Business Suite’s Contract Lifecycle Management for Public Sector (Award Processes). Affected versions are 12.2.3–12.2.13. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to impersonate legitimate operations, potentially leading to u...
Oracle Fusion Middleware 安全漏洞
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. A security vulnerability exists in Oracle Global Lifecycle Management...
CVE-2024-21190: Undefined Security Weakness
Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...
PT-2024-7083
Name of the Vulnerable Software and Affected Versions Oracle Global Lifecycle Management FMW Installer version 12.2.1.4.0 Description The issue is related to insufficient input validation in the Cloning component of the Oracle Global Lifecycle Management FMW Installer product. This allows an...
CVE-2024-21278: Incorrect Authorization
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Award Processes. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
Notice of Change - Intelligent Traffic Management (ITM) and Network Experience Monitoring (NEM)
Information Citrix Systems, Inc. announces a Notice of Status Change for the End of Life EOL date of Citrix Intelligent Traffic Management ITM and Network Experience Monitoring NEM. The table below explains the Citrix ITM and NEM life cycle management milestones as well as important information...
API Gateways and API Protection: What’s the Difference?
Modern businesses are increasingly reliant on APIs. They are the building blocks facilitating data exchange and communication between disparate systems. Because of their prevalence and importance, they are also under attack by actors exploiting vulnerabilities and misconfigurations. Unauthorized...
Proactive Visibility Is Foundational to Strong Cybersecurity
Authored by Guest IDC Blogger: Michelle Abraham Exposures are more than CVEs, so organizations need to move beyond the traditional thinking of vulnerability management to a holistic view. Part of that view must be greater visibility into devices, users, applications, and all the digital...
Unauthorized Access
Zitadel is vulnerable to Unauthorized Access. The vulnerability is due to the improper decoupling of the application lifecycle from the organization's lifecycle. Specifically, when an organization is deactivated in Zitadel, its associated applications remain active, allowing users from other...
kernel: drm/amdgpu: change vm->task_info handling
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm-taskinfo handling This patch changes the handling and lifecycle of vm-taskinfo object. The major changes are: - vm-taskinfo is a dynamically allocated ptr now, and its uasge is reference counted. - introduci...
CVE-2024-47060: Exposure of Sensitive Information to an Unauthorized Actor
Zitadel is an open source identity management platform. In Zitadel, even after an organization is deactivated, associated projects, respectively their applications remain active. Users across other organizations can still log in and access through these applications, leading to unauthorized acces...
CVE-2024-47060
Zitadel contains a vulnerability (CVE-2024-47060) where deactivating an organization or project does not automatically revoke access to its applications. Multiple connected sources describe that even after deactivation, associated projects/applications remain active, allowing users from other org...
CVE-2024-47060 Unauthorized Access After Organization or Project Deactivation in Zitadel
Zitadel is an open source identity management platform. In Zitadel, even after an organization is deactivated, associated projects, respectively their applications remain active. Users across other organizations can still log in and access through these applications, leading to unauthorized acces...
GHSA-JJ94-6F5C-65R8 ZITADEL Allows Unauthorized Access After Organization or Project Deactivation
Summary In Zitadel, even after an organization is deactivated, associated projects, respectively their applications remain active. Users across other organizations can still log in and access through these applications, leading to unauthorized access. Additionally, if a project was deactivated...
