Azul Zulu Java Multiple Vulnerabilities (2023-07-18)

The version of Azul Zulu installed on the remote host is 7 prior to 7.63.0.14 / 8 prior to 8.71.0.14 / 11 prior to 11.65.14 / 17 prior to 17.43.14 / 20 prior to 20.32.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-07-18 advisory. - Vulnerability in the Oracle...

Code injection

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are Prior to 9.2.7.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

Oracle Application Express 安全漏洞

Oracle Application Express is the United States Oracle Oracle, a low-code development platform. A security vulnerability in Application Express Administration in Oracle Application Express can be exploited by an attacker to cause unauthorized update, insertion, or deletion access to certain...

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to cause unauthorized update, insertion, or deletion access to MySQL Server accessible data...

PT-2023-3638

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.19 Oracle Database Server versions 21.3 through 21.10 Description The issue is related to insufficient input validation in the Advanced Networking Option component of Oracle Database Server. It...

CVE-2023-2869

The WP-Members Membership plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the dofieldreorder function in versions up to, and including, 3.4.7.3. This makes it possible for authenticated attackers with subscriber-level access to reorde...

CVE-2023-23562

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters...

CVE-2023-21968

CVE-2023-21968 affects Oracle Java SE and GraalVM when using the Libraries component (and related entries list Swing/JSSE/Hotspot among affected subsystems) for multiple Java versions (e.g., 8u361, 11.0.18, 17.0.6, 20; GraalVM EE 20.3.9/21.3.5/22.3.1). The vulnerability is exploitable over the ne...

PT-2023-2654

Name of the Vulnerable Software and Affected Versions JD Edwards EnterpriseOne Tools versions prior to 9.2.7.3 Description The issue is related to insufficient input validation in the Web Runtime SEC component. It allows a low-privileged attacker with network access via HTTP to compromise JD...

PT-2023-2529

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 and 11 Description The issue is related to insufficient input validation in the Utility component of Oracle Solaris, allowing an unauthenticated attacker with logon to the infrastructure to compromise Oracle Solaris...

CVE-2023-24504

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

CVE-2023-24504

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

Code injection

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

CVE-2023-24504: Undefined Security Weakness

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

CVE-2023-24504 Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server...

PT-2023-19651 · Electra · Electra Central Ac Unit

Name of the Vulnerable Software and Affected Versions: Electra Central AC unit affected versions not specified Description: The issue allows an adjacent attacker to cause the unit to connect to an unauthorized update server. Recommendations: At the moment, there is no information about a newer...

Electra Central AC unit 安全漏洞

The Electra Central AC unit is an Electra Central AC unit from Electra. A security vulnerability exists in the Electra Central AC unit. An attacker could exploit the vulnerability to cause the unit to connect to an unauthorized update server...

CVE-2023-1339

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the uucssupdaterule function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to...

CVE-2023-1339

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the uucssupdaterule function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to...

Design/Logic Flaw

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the ucssconnect function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access t...