283 matches found
CVE-2024-20913
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2024-20913
Oracle BI Enterprise Edition (OBIEE) 12.2.1.4.0 is affected by a vulnerability in the BI Platform Security component due to insufficient input validation. An attacker with network access via HTTP and low privileges, requiring user interaction, can compromise data confidentiality and integrity—una...
VulnCheck KEV: CVE-2023-29324
Windows MSHTML Platform Security Feature Bypass Vulnerability...
The vulnerability of the BI Platform Security component of the Oracle Business Intelligence Enterprise Edition software allows attackers to compromise data confidentiality and integrity.
The vulnerability of the BI Platform Security component of the Oracle Business Intelligence Enterprise Edition exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of data...
PT-2024-1222 · Oracle · Oracle Business Intelligence Enterprise Edition
Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Description: The issue exists due to insufficient input validation in the BI Platform Security component. This allows a remote attacker to compromise the confidentiality and...
WWBN AVideo Security Breach
WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo, which originates from an information disclosure vulnerability in the image404Raw.php page...
WWBN AVideo Security Breach
WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo, which stems from a local file inclusion vulnerability in the getLanguageFromBrowser method...
LinkedIn: An attacker can submit arbitrary projects to their service accounts and obtain full information on projects of other users.
An information disclosure vulnerability was discovered in the Request Services feature that allowed attackers to obtain project details of other users. The issue was resolved and a bounty was paid to the researcher who reported it...
CVE-2021-27795
CVE-2021-27795 affects Brocade Fabric OS (FOS) on hardware platforms that support the license string format. The issue stems from cryptographic weaknesses that could allow forged or fraudulent license keys to be accepted and activated as legitimate. The affected software is described as any versi...
CVE-2023-37910 org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with the introduction of attachment move support in version 14.0-rc-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, an attacker with edit access on any document can be the use...
OpenJDK: certificate path validation issue during client authentication (8309966)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise...
CVE-2023-45355
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the webservice. This is also known as...
CVE-2023-0828 Stored Cross Site Scripting in syslog section
Cross-site Scripting XSS vulnerability in Syslog Section of Pandora FMS allows attacker to cause that users cookie value will be transferred to the attackers users server. This issue affects Pandora FMS v767 version and prior versions on all platforms...
Cross site request forgery (csrf)
Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests without any token value. Therefore, an...
X wants your biometric data
Users of X formerly Twitter paying for a checkmark under what used to be called Twitter Blue now X Premium have some biometric related decisions to make. The BBC reports that Elon Musk, having dismantled the old checkmark system to replace it with the all new Premium, is reintroducing identity...
CVE-2023-35336
Windows MSHTML Platform Security Feature Bypass Vulnerability...
CVE-2023-35308 Windows MSHTML Platform Security Feature Bypass Vulnerability
...
CVE-2023-32423
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information...
Platbox - UEFI And SMM Assessment Tool
UEFI and SMM Assessment Tool Features Platbox is a tool that helps assessing the security of the platform: Dumps the platform registers that are interesting security-wise Flash Locks MMIO and Remapping Locks SMM Base and Locks MSRs RW access to the PCI configuration space of devices. RW to physic...