NuGet Package Management Access Control Data Compromise

The vulnerability of the NuGet package management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information by modifying the intermediate build directory...

Cisco Video Surveillance Manager Disclosure

The vulnerability in the web interface for managing Cisco Video Surveillance Manager exists due to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information by sending specially crafted requests...

Windows GDI Disclosure

The vulnerability of Windows GDI graphics device interfaces on Windows operating systems is related to errors in handling memory contents. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

Intel Graphics Driver Information Disclosure

The vulnerability of the Kernel Mode Driver component in Intel Graphics Drivers is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to disclose protected information...

Cisco Application Policy Infrastructure Controller Disclosure

The vulnerability of the Cisco Application Policy Infrastructure Controller web interface is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a malicious actor to gain access to protected data remotely...

Etlas SQL Injection Information Disclosure

The vulnerability of the Etlas electronic document management system lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain access to protected information by entering a specially crafted SQL query into the “Process Name” field o...

Oracle Trade Management UI Unauthorized Access

The vulnerability of the User Interface component of the Oracle Trade Management component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using th...

Consolidation Hierarchy Viewer Oracle General Ledger Unauthorized Access

The vulnerability of the Consolidation Hierarchy Viewer component of the Oracle Trade Management software, a business automation system within the Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to...

Oracle Work in Process Messages Sub-component Unauthenticated Access

The vulnerability of the Messages sub-component of the Oracle Work in Process component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the...

PeopleSoft Enterprise PT PeopleTools RemoteCall Unauthorized Access

The vulnerability of the RemoteCall sub-component of the PeopleSoft Enterprise PT PeopleTools component of the Oracle PeopleSoft Products suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

Oracle WebCenter Sites Advanced UI Unauthorized Access

The vulnerability of the Advanced UI sub-component of the integrated customer service platform for Internet applications, Oracle WebCenter Sites, is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...

BI Publisher Security Sub-component Unauthorized Access

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool formerly XML Publisher is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using...

Oracle WebLogic Server Unauthorized Access

The vulnerability of Oracle WebLogic Server’s application server’s WLS core components is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

Outside In Filters Oracle SDK Unauthorized Access Partial

The vulnerability of the Outside In Filters sub-component of the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or cause a partial servic...

Apache HTTP Server mod_http2 Resource Exhaustion

The vulnerability of the modhttp2 module in the Apache HTTP Server is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests...

Oracle WebLogic Server Unauthorized Access

The vulnerability of the EJB Container component of Oracle WebLogic Server is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the T3 protocol...

SAP Disclosure Management Disclosure

The vulnerability of the SAP Disclosure Management software for generating financial reports is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Rendezvous Routing Daemon Unauthorized Access

The vulnerabilities of the Rendezvous Routing Daemon rvrd, Rendezvous Secure Routing Daemon rvrsd, Rendezvous Secure Daemon rvsd, Rendezvous Cache rvcache, and Rendezvous Daemon Manager rvdm – a platform for high-speed data distribution by TIBCO Rendezvous – are related to the manipulation of...

SAP HANA Extended Application Services XML Processing

The vulnerability of the SAP HANA Extended Application Services development tool is related to errors in processing XML documents. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures by using a specially created XML file...

SAP HANA Extended Application Services Credential Access

The vulnerability of the SAP HANA Extended Application Services development tool lies in the process of recording user credentials in a trace file. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information...