8061 matches found
CVE-2021-2435
Vulnerability in the Essbase Analytic Provider Services product of Oracle Essbase component: JAPI. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Essbase Analytic Provider Services...
CVE-2021-2435
CVE-2021-2435 affects Oracle Essbase Analytic Provider Services (EAPS) component JAPI in Oracle Essbase, affected version 11.1.2.4. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise EAPS, with human interaction required for exploitation. Consequences ...
CVE-2021-2433
Vulnerability in the Essbase Analytic Provider Services product of Oracle Essbase component: Web Services. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Essbase Analytic...
CVE-2021-2433
CVE-2021-2433 affects Oracle’s Essbase Analytic Provider Services (Web Services) in Essbase. Affected versions are 11.1.2.4 and 21.2. An unauthenticated attacker with network access via HTTP can cause the service to hang or crash repeatedly (complete DOS). The CVSS 3.1 base score is 7.5 (Availabi...
CVE-2021-2433
Vulnerability in the Essbase Analytic Provider Services product of Oracle Essbase component: Web Services. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Essbase Analytic...
Oracle Essbase 输入验证错误漏洞
Oracle Essbase is an application from Oracle Corporation Oracle. enables organizations to quickly generate insights from multidimensional data sets using what-if analysis and data visualization tools. An input validation error vulnerability exists in Oracle Essbase versions 11.1.2.4 and 21.2, whi...
Oracle Essbase 输入验证错误漏洞
Oracle Essbase is an application from Oracle Corporation Oracle. enables organizations to quickly generate insights from multidimensional data sets using what-if analysis and data visualization tools. An input validation error vulnerability exists in Oracle Essbase version 11.1.2.4, which can be...
Prevent Cyber Risk as a Managed Service Provider (MSP)
MSPs – Say no to the next Ransomware! Protect your Business 24x7 with Trend Micro’s security analysts...
What’s Next for REvil’s Victims?
Last week, the servers of ransomware giant REvil vanished. Many applauded as dark-web and clear-web sites used to support the backend infrastructure of REvil, aka Sodinokibi, as well as to leak victims’ data, slipped offline early Tuesday morning. Not REvil’s victims, though. They’re now stuck,...
SQL Injection Vulnerability in Wechat Ordering System of Huitong Network
Shenzhen Huitong Network is a solution provider. Huitong Network WeChat Ordering System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Microsoft Windows/Windows Server Denial of Service Vulnerability (CNVD-2021-66059)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A denial-of-service vulnerability exists in the AFUNIX Socket Provider in Microsoft...
CVE-2021-25320
A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID. Rancher in this case would attach the requested credentials without further checks This issue affects: Rancher versions prior to...
CVE-2021-25320 Rancher: Cloud credentials can be used through proxy API by users without access
A Improper Access Control vulnerability in Rancher, allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID. Rancher in this case would attach the requested credentials without further checks This issue affects: Rancher versions prior to...
CVE-2021-25320
CVE-2021-25320 is an improper access control vulnerability in Rancher. Multiple connected sources specify that Rancher versions prior to 2.5.9 and prior to 2.4.16 are affected, allowing cluster users to trigger cloud-provider requests by crafting requests with a cloud-credential ID, with Rancher ...
CVE-2021-33785
Windows AFUNIX Socket Provider Denial of Service Vulnerability...
CVE-2021-33785
Windows AFUNIX Socket Provider Denial of Service Vulnerability...
Denial of service
Windows AFUNIX Socket Provider Denial of Service Vulnerability...
CVE-2021-33785 Windows AF_UNIX Socket Provider Denial of Service Vulnerability
...
CVE-2021-33785
CVE-2021-33785 is described in connected records as a Windows/Windows Server Denial of Service vulnerability in the AF_UNIX Socket Provider. The documents do not provide detailed affected products/versions, root cause, exploit info, or remediation steps beyond the general DoS context.