PT-2021-1912

Name of the Vulnerable Software and Affected Versions Oracle ZFS Storage Appliance Kit version 8.8 Description The issue is related to inadequate access control in the RAS subsystems component, allowing a high-privileged attacker with logon access to the infrastructure to compromise the system...

PT-2021-1768

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.4 through 8.5.5 Description: The issue is related to insufficient access controls in the Outside In Filters component of Oracle Outside In Technology, allowing an unauthenticated attacker with network...

PT-2021-1902

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to insufficient access control in the Report component of Oracle Hospitality Reporting and Analytics. This can be exploited by a remote attacker with low...

Oracle Fusion Middleware component authorization vulnerability

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. A security vulnerability exists in the Outside In Filters...

Oracle Fusion Middleware security vulnerabilities

Oracle Outside In Technology is a software development kit SDK that provides developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in more than 600 unstructured file formats. A security vulnerability exists in the Outside In Filters...

Oracle PeopleSoft security vulnerabilities

Oracle PeopleSoft Products is the United States Oracle Oracle company's set of enterprise human capital management solutions. The product provides human capital management, financial management, supplier relationship management and other functions.PeopleSoft Enterprise FIN Project Costing is one ...

CVE-2020-29493

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database, causing unauthorize...

Xiaomi Ax6 Authorization Issues Vulnerabilities

Xiaomi Ax6 is a router from Chinese company Xiaomi. Xiaomi Ax6 suffers from an authorization issue vulnerability that stems from a program misconfiguration, which can be exploited by an attacker to download unauthorized data...

Firefox Thunderbird Buffer Overflow Information Disclosure

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to information and compromise its integrity and...

PT-2021-11841 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Hospital Management System version 4.0 Description: The issue allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs due to improper restriction o...

CVE-2020-24673

In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify database data Insert/Update/Delete, execute administration operations on the database such as shutdown the DBMS, recover the content of a given file present on the DBMS file...

Security Bulletin: Critical Security Vulnerability in RDS Client library affecting Rational Synergy (CVE-2014-3089)

Summary Clear text password in IBM Rational Directory Server RDS supplied Client library could allow potential hacker to gain access to RDS and access to unauthorized data used by consuming products such as Rational Synergy. Vulnerability Details | Subscribe to My Notifications to be notified of...

PT-2020-14063

Name of the Vulnerable Software and Affected Versions Oracle Cloud Infrastructure Identity and Access Management affected versions not specified Description The issue allows a high-privileged attacker with network access to compromise Oracle Cloud Infrastructure Identity and Access Management...

mysql: InnoDB unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

PT-2020-16753

Name of the Vulnerable Software and Affected Versions Synology SafeAccess versions prior to 1.2.3-0234 Description The issue allows remote attackers to execute arbitrary SQL commands via the domain parameter in request.cgi. This enables attackers to manipulate database queries, potentially leadin...

Sql injection

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrator user may exploit a vulnerable API call using specially crafted SQL queries which may lead to unauthorized data acce...

CVE-2020-3984

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrator user may exploit a vulnerable API call using specially crafted SQL queries which may lead to unauthorized data acce...

CVE-2020-3984: Improper Neutralization of Special Elements used in an SQL Command

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrator user may exploit a vulnerable API call using specially crafted SQL queries which may lead to unauthorized data acce...

PT-2020-17821

Name of the Vulnerable Software and Affected Versions SD-WAN Orchestrator versions 3.3.2 through 3.3.2 P3 SD-WAN Orchestrator versions 3.4.x through 3.4.4 Description The issue is related to incorrect input validation, which allows for SQL-injection. An authenticated user may exploit a vulnerable...

Oracle Retail Customer Management Promotions Unauthorized Access

The vulnerability of the Promotions component of the Oracle Retail Customer Management and Segmentation Foundation software is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information using the HTTP protocol...