546 matches found
PT-2024-12320 · Ibm · Ibm Maximo Spatial Asset Management
Name of the Vulnerable Software and Affected Versions: IBM Maximo Spatial Asset Management version 8.10 Description: The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. This is due to a...
Vulnerabilities fixed in Oracle Database products
Oracle has fixed vulnerabilities in several Database Server products. A malicious party can exploit the vulnerabilities to perform attacks that could result in the following categories of damage: Denial-of-Service DoS. Remote code execution User rights Access to sensitive data Access to system da...
Oracle Database Server (January 2024 CPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory. - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.21 and 21.3-21.12. Easi...
Oracle Patch Update, January 2024 Security Update Review
Oracle has released its first quarterly edition of Critical Patch Update, which contains patches for 389 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in a wide range of product families, includin...
Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to Blind Server-Side Request Forgery (CVE-2023-32337)
Summary IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to Blind Server-Side Request Forgery CVE-2023-32337 Vulnerability Details CVEID:CVE-2023-32337 DESCRIPTION: IBM Maximo Spatial Asset Management is vulnerable to server-side request forgery SSRF. This may allow an...
ALPINE-CVE-2023-49465
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function at motion.cc...
UBUNTU-CVE-2023-49465
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function at motion.cc...
CVE-2023-49465
Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function at motion.cc...
scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) +2 more potentially affected by CVE-2023-49080 via jupyter-server (1.18.1)
jupyter-server PYPI version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.2.0, =0.8.0, =1.0.0 Source cves: CVE-2023-49080 Source advisory: OSV:GHSA-H56G-GQ9V-VC8R...
PT-2023-8338 · Libde265 +4 · Libde265 +4
Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.14 Description: The issue is related to a heap-buffer-overflow vulnerability in the derive spatial luma vector prediction function. This vulnerability may allow a remote attacker to impact the confidentiality, integrity,...
Oracle Database Server (October 2023 CPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2023 CPU advisory. - Vulnerability in the Oracle Spatial and Graph cURL component of Oracle Database Server. Supported versions that are affected are 19.3-19.2...
Vulnerabilities fixed in Oracle Database Server
Vulnerabilities have been fixed in Oracle Database Server products. A malicious party can exploit the vulnerabilities to perform attacks that can result in the following categories of damage: Denial-of-Service DoS Manipulation of data Bypassing authentication Bypassing security measure Oracle has...
PT-2023-36660
Уязвимость компонента openstack-barbican платформы облачных сервисов Red Hat OpenStack Platform связана с недостаточным пространственным разделением. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации...
OSV-2023-769 Index-out-of-bounds in derive_spatial_luma_vector_prediction
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61844 Crash type: Index-out-of-bounds Crash state: derivespatiallumavectorprediction filllumamotionvectorpredictors motionvectorsandrefindices...
scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) +2 more potentially affected by CVE-2023-39968 via jupyter-server (1.18.1)
jupyter-server PYPI version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.2.0, =0.8.0, =1.0.0 Source cves: CVE-2023-39968 Source advisory: OSV:GHSA-R726-VMFQ-J9J3...
CVE-2022-42183
Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery SSRF...
CVE-2022-42183
Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery SSRF...
CVE-2022-42182
Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal...