25 matches found
CVE-2026-46983
Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications component: RIB Kernal. The supported version that is affected is 16.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Integration...
PT-2026-62148
Name of the Vulnerable Software and Affected Versions Oracle Retail Integration Bus version 16.0.3 Description A flaw in the RIB Kernal component of the Oracle Retail Integration Bus allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation...
CVE-2026-27312 Bridge | Heap-based Buffer Overflow (CWE-122)
Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
March 26, 2026—KB5079489 (OS Build 28000.1764) Preview
None None...
Security update for cheat (important)
openSUSE security update: security update for cheat ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025:20177-1 Rating: important References: bsc1247629 bsc1253593 bsc1253922 bsc1254051 Cross-References: CVE-2023-48795 CVE-2025-21613 CVE-2025-21614...
VulnCheck KEV: CVE-2024-11238
A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sysuicomponent/sysUiComponent.do?method=delPreviewFile. The manipulation of the argument directoryPath leads to path traversal. It is possible...
Landray EKP 路径遍历漏洞
Landray EKP is an office automation solution from China's Landray Corporation that enables companies to easily model and manage their business. A path traversal vulnerability exists in Landray EKP V16.0 and earlier versions, which stems from the parameter folder in the file...
D-Link DI-8100 Command Injection Vulnerability
The D-Link DI-8100 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. A command injection vulnerability exists in the D-Link DI-8100 version 16.07, which stems from the fact that manipulation of parameter paths by upgradefilterasp in the fi...
CLSA-2022-1660064249 Fix CVE(s): CVE-2022-21434, CVE-2022-21426, CVE-2022-21443, CVE-2022-34169, CVE-2022-21540, CVE-2022-21541, CVE-2022-21476, CVE-2022-21496
Backport upstream releases 8u342 and 8u332 to 16.04 LTS Security fixes in 8u342: - JDK-8272243: Improve DER parsing - JDK-8272249: Better properties of loaded Properties - JDK-8277608: Address IP Addressing - JDK-8281859, CVE-2022-21540: Improve class compilation - JDK-8281866, CVE-2022-21541:...
CVE-2021-46650
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
Adobe InDesign 缓冲区错误漏洞
Adobe InDesign is a desktop publishing DTP application from Adobe that is primarily used for typesetting and editing a variety of printed materials. An out-of-bounds write vulnerability exists in Adobe InDesign 16.0 and earlier versions. An attacker could exploit this vulnerability to execute...
siemens Tecnomatix RobotExpert 安全漏洞
siemens Tecnomatix RobotExpert is a software application from Siemens, Germany. It provides support for unique industry applications such as mounting, arc welding, polishing, gluing and others. A security vulnerability exists in siemens Tecnomatix RobotExpert. The vulnerability stems from the...
Parallels Desktop Information Disclosure Vulnerability (CNVD-2020-46853)
Parallels Desktop is a virtual machine software that runs on Mac computers. An information disclosure vulnerability exists in the HOSTIOCTLINITHYPERVISOR handler in prlhypervisor kext in versions prior to Parallels Desktop 16.0.0 48916. The vulnerability stems from unprivileged users being able t...
SAP Adaptive Server Enterprise Information Disclosure Vulnerability (CNVD-2020-46790)
SAP Adaptive Server Enterprise ASE is a relational database server from SAP, Germany. An information disclosure vulnerability exists in SAP ASE version 16.0. An attacker could exploit the vulnerability to access encrypted sensitive information...
CVE-2020-14709
Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Card. Supported versions that are affected are 16.0, 17.0 and 18.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2020-6241
SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevate privileges of users in the system, leading to SQL Injection...
Oracle Access Control Error Vulnerability
Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management. A security vulnerability exists in the Security component of Retail Store Inventory Management...
Important: Red Hat Enhancement Advisory: Red Hat OpenStack Platform 16.0 GA
Updated packages that fix several bugs and add various enhancements are now available for Red Hat OpenStack Platform 16.0 Train for RHEL 8.1. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud runnin...
CVE-2020-2649
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...
CVE-2018-3312
Vulnerability in the Oracle Retail Customer Engagement component of Oracle Retail Applications subcomponent: Segment. Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Retail...