298 matches found
The vulnerability of the BI Platform Security component of the Oracle Business Intelligence Enterprise Edition software allows attackers to compromise data confidentiality and integrity.
The vulnerability of the BI Platform Security component of the Oracle Business Intelligence Enterprise Edition exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of data...
PT-2024-1222 · Oracle · Oracle Business Intelligence Enterprise Edition
Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Description: The issue exists due to insufficient input validation in the BI Platform Security component. This allows a remote attacker to compromise the confidentiality and...
WWBN AVideo Security Breach
WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo, which originates from an information disclosure vulnerability in the image404Raw.php page...
WWBN AVideo Security Breach
WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo, which stems from a local file inclusion vulnerability in the getLanguageFromBrowser method...
LinkedIn: An attacker can submit arbitrary projects to their service accounts and obtain full information on projects of other users.
An information disclosure vulnerability was discovered in the Request Services feature that allowed attackers to obtain project details of other users. The issue was resolved and a bounty was paid to the researcher who reported it...
CVE-2021-27795
CVE-2021-27795 affects Brocade Fabric OS (FOS) on hardware platforms that support the license string format. The issue stems from cryptographic weaknesses that could allow forged or fraudulent license keys to be accepted and activated as legitimate. The affected software is described as any versi...
CVE-2023-37910 org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with the introduction of attachment move support in version 14.0-rc-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, an attacker with edit access on any document can be the use...
OpenJDK: certificate path validation issue during client authentication (8309966)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise...
CVE-2023-45355
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the webservice. This is also known as...
CVE-2023-0828 Stored Cross Site Scripting in syslog section
Cross-site Scripting XSS vulnerability in Syslog Section of Pandora FMS allows attacker to cause that users cookie value will be transferred to the attackers users server. This issue affects Pandora FMS v767 version and prior versions on all platforms...
Cross site request forgery (csrf)
Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests without any token value. Therefore, an...
X wants your biometric data
Users of X formerly Twitter paying for a checkmark under what used to be called Twitter Blue now X Premium have some biometric related decisions to make. The BBC reports that Elon Musk, having dismantled the old checkmark system to replace it with the all new Premium, is reintroducing identity...
CVE-2023-35336
Windows MSHTML Platform Security Feature Bypass Vulnerability...
CVE-2023-35308 Windows MSHTML Platform Security Feature Bypass Vulnerability
...
CVE-2023-32423
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information...
Platbox - UEFI And SMM Assessment Tool
UEFI and SMM Assessment Tool Features Platbox is a tool that helps assessing the security of the platform: Dumps the platform registers that are interesting security-wise Flash Locks MMIO and Remapping Locks SMM Base and Locks MSRs RW access to the PCI configuration space of devices. RW to physic...
inDrive: the domain is truck-admin.eu-east-1.indriverapp.com and Enter the management system of the blasting mobile phone verification code
Vulnerability description not provided...
CVE-2023-29324
Windows MSHTML Platform Security Feature Bypass Vulnerability...
Pimcore Properties Parameter Cross-Site Scripting Vulnerability
Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce framework and product information management applications. A cross-site scripting vulnerability exists in...
