CVE-2022-21630

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

CVE-2022-21630

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

CVE-2022-21639

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Elastic Search Integration. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2022-21616

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

CVE-2022-21590

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Core Formatting API. Supported versions that are affected are 5.9.0.0, 6.4.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

UBUNTU-CVE-2022-39403

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell: Core Client. Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell...

PT-2022-24964 · Oracle · Oracle Transportation Management

Name of the Vulnerable Software and Affected Versions: Oracle Transportation Management versions 6.4.3 through 6.5.1 Description: The issue allows a high privileged attacker with network access via HTTP to compromise Oracle Transportation Management, resulting in unauthorized access to critical...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle Corporation. A denial of service vulnerability exists in the LDoms component of Oracle Solaris 11. An attacker could compromise Oracle Solaris to gain unauthorized access to a subset of Oracle Solaris-accessible data and cause a partial denial...

PT-2022-5180 · Oracle +1 · Oracle Mysql Shell +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Shell versions 8.0.30 and prior Description: The issue is related to insufficient input validation in the Shell: Core Client component of Oracle MySQL Shell. This allows a low-privileged attacker with logon access to the...

Oracle Fusion Middleware 安全漏洞

Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation USA. The platform provides middleware, software collections, and other capabilities.An information disclosure vulnerability exists in the Dashboard component of Oracle...

PT-2022-5178 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server version 19c Description: The issue exists due to insufficient protection of the web page structure in the Oracle Services for Microsoft Transaction Server component. This allows a remote attacker to potentially gain rea...

PT-2022-5282 · Mysql Server · Mysql Installer

Name of the Vulnerable Software and Affected Versions: MySQL Installer versions 1.6.3 and prior Description: The issue allows a low-privileged attacker with logon to the infrastructure where MySQL Installer executes to compromise MySQL Installer. Successful attacks require human interaction from ...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading beyond the buffer in memory, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created malicious file...

CVE-2022-39282

FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server implementations are not affected. Please...

CVE-2022-39849

CVE-2022-39849 describes an improper access control in the knox_vpn_policy service prior to Samsung SMR Oct-2022 Release 1, allowing unauthorized read of configuration data. Affected component: knox_vpn_policy in Samsung Knox/VPN policy context. Root cause: insufficient access restrictions enabli...

The vulnerability of the Video microprogramming system component in Qualcomm’s embedded chips allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Video microprogramming software component in Qualcomm’s embedded chips relates to the lack of checks for buffer length and reading beyond the memory boundary when processing AVI files. Exploiting this vulnerability can allow an intruder to gain unauthorized access to...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to gain access to confidential data

The vulnerability of the Linux operating system’s kernel is related to the transfer of protected information in unencrypted form. Exploiting this vulnerability allows an attacker to gain access to confidential data...

Security Bulletin: Lack of path restriction may allow access to sensitive data stored on Information Server Engine (CVE-2012-4818)

Abstract Security Bulletin: Lack of path restriction may allow access to sensitive data stored on Information Server Engine CVE-2012-4818 Content VULNERABILITY DETAILS: CVE ID: CVE-2012-4818 DESCRIPTION: Whenever an Information Server client application such as InfoSphere DataStage and QualitySta...

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

The vulnerability of the shell command line interface in IPython’s interactive computing environment allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the shell command line interface for interactive IPython computations is related to access control errors. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...