6 matches found
EUVD-2024-18630
Malicious code in bioql PyPI...
EUVD-2023-53991
Malicious code in bioql PyPI...
CVE-2024-20915: Inconsistent Interpretation of HTTP Requests
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: Login - SSO. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application...
CVE-2023-4102 Multiple vulnerabilities in IDM Sistemas QSige
QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...
CVE-2023-4102: Improper Neutralization of Special Elements used in an SQL Command
QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...
CVE-2023-4101: Authorization Bypass Through User-Controlled Key
The QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...