8417 matches found
CVE-2021-2101
Oracle E-Business Suite — One-to-One Fulfillment Print Server vulnerability (CVE-2021-2101) affects 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker with HTTP access can compromise data and gain unauthorized access. CVSS 3.1 base score 9.1 (C/H, I/H). Remediation: Oracle CPU Jan 2021...
CVE-2021-2100
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2021-2100
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2021-2100
CVE-2021-2100 affects Oracle E-Business Suite — Print Server (Oracle One-to-One Fulfillment). Public sources in the connected set confirm vulnerable versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability enables an unauthenticated, network-accessible attacker (HTTP) to execute actions with ...
CVE-2021-2101
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2021-2094: Undefined Security Weakness
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2021-2100: Undefined Security Weakness
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2021-2101: Undefined Security Weakness
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
Oracle E-Business Suite Multiple Vulnerabilities (Jan 2021 CPU)
The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2021 CPU advisory. - Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected a...
PT-2021-1746
Name of the Vulnerable Software and Affected Versions Oracle One-to-One Fulfillment versions 12.1.1 through 12.1.3 Oracle One-to-One Fulfillment versions 12.2.3 through 12.2.10 Description The issue is related to insufficient access controls in the Print Server component of Oracle One-to-One...
PT-2021-1775
Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The issue is related to inadequate access control in the Print Server component of Oracle One-to-One Fulfillment. It...
PT-2021-1744
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to inadequate access control in the Print Server component of Oracle One-to-One Fulfillment. It...
The vulnerability of the Windows operating system’s print queue dispatcher service allows a hacker to escalate their privileges.
The vulnerability of the Windows operating system’s print queue dispatcher is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft Spooler Local Privilege Elevation Exploit
This exploit leverages a file write vulnerability in the print spooler service which will restart if stopped. Because the service cannot be stopped long enough to remove the dll, there is no way to remove the dll once it is loaded by the service. Essentially, on default settings, this module adds...
Microsoft Spooler Local Privilege Elevation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/windows/powershell' class MetasploitModule 'Microsoft Spooler Local Privilege Elevation Vulnerability', 'Description' = %q This exploit leverages ...
Microsoft Windows Print Spooler Directory Junction Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Print Spooler...
Microsoft Issues Patches for Defender Zero-Day and 82 Other Windows Flaws
For the first patch Tuesday of 2021, Microsoft released security updates addressing a total of 83 flaws spanning as many as 11 products and services, including an actively exploited zero-day vulnerability. The latest security patches cover Microsoft Windows, Edge browser, ChakraCore, Office and...
CVE-2021-1695
Windows Print Spooler Elevation of Privilege Vulnerability...
