Vulnerabilities fixed in Oracle Supply Chain Products Suite

Oracle has fixed multiple vulnerabilities in Supply Chain Products Suite. The vulnerabilities potentially enable a malicious person able to perform attacks that result in the following categories of damage: Cross-Site Scripting XSS. Manipulation of data Remote code execution User Rights Access to...

Vulnerabilities fixed in Oracle Virtualization

Vulnerabilities have been fixed in Oracle Virtualization/Virtualbox. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data...

Vulnerabilities fixed in Oracle JD Edwards

Oracle has fixed vulnerabilities in the following Oracle JD Edwards products: JD Edwards EnterpriseOne Tools JD Edwards EnterpriseOne Orchestrator The vulnerabilities allow an unauthenticated malicious person with network access to the vulnerable system may be able to launch attacks execute attac...

Vulnerabilities fixed in Oracle PeopleSoft

Oracle has fixed several vulnerabilities in PeopleSoft. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS. Data manipulation. Remote code execution User Righ...

Vulnerability fixed in Oracle Siebel

Oracle has fixed several vulnerabilities in Siebel. The vulnerabilities allow an unauthenticated malicious person with network access to the vulnerable system may be able to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service Manipulation of data...

Vulnerabilities fixed in Oracle Communications

Vulnerabilities have been fixed in Oracle Communications. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Circumvention of security measure SQL Injection Accessing sensitive data Accessing...

Cisco SD-WAN vManage Software 输入验证错误漏洞

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An authorization bypass vulnerability exists in the web management interface of Cisco SD-WAN vManage. The vulnerability stems from insufficient authorization checking of user account...

Google Chrome Security Updates (stable-channel-update-for-desktop_19-2021-01) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop_19-2021-01) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Vulnerabilities fixed in openSUSE kernel

Vulnerabilities have been fixed in openSUSE. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User Rights Access to sensitive data Increased user rights -= openSUSE =- T...

Vulnerabilities fixed in Jenkins

Vulnerabilities have been fixed in Jenkins. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Circumvention of security measure Accessing sensitive data Jenkins has released updates to...

SQL injection vulnerability in miku cms backend cm***_bo***_ed***.php file

Miku cms is a movie and TV management system designed for webmasters with different needs. A SQL injection vulnerability exists in the cmboed.php file in the backend of Miku cms. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in yycms Movie & TV System V2.3 Admin Catalog yy***_km***.php

yycms is a movie and television system. yycms film and television system V2.3 version admin directory yykm.php SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in YouYi cms yy***_us***_ed***.php File

Youyi cms is a movie and TV station building system. A SQL injection vulnerability exists in the YouYi cms yyused.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in Douxin Us***.cl***.php file (CNVD-2021-03469)

Douxin is an open source framework focused on the development of WeChat. A SQL injection vulnerability exists in the Douxin Us.cl.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Incu Open Source Online School System

Incu open source online school system is by the Beijing Incu Times Technology Co., Ltd. hereinafter referred to as Incu Education Software developed and launched the Java version of the open source online school source code to build the system. Incu open source online school system has a SQL...

Vulnerabilities fixed in Android

Vulnerabilities have been fixed in Android. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Access to system data Increased user privileges As usual,...

PT-2024-10821 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 85.0.4183.83 Description: The issue is related to insufficient policy enforcement in Navigation, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could potentially affect a...

HcCMS suffers from SQL injection vulnerability

HcCms is a free website building system developed in php language. HcCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

ShopsN open source mall system v3.0.6 de**** module SQL injection vulnerability

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd. is a full-featured in line with enterprise-class commercial standards really allow free commercial use of the open source online store full network system . ShopsN open source mall system v3.0.6 de module SQ...