PT-2021-3262

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to insufficient input validation in the Account Hierarchy Manager component of Oracle General Ledger. This allows a low-privileged attacker with network...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is a seamlessly integrated management suite. Oracle Cash Manageme...

PT-2021-3263

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Transportation Execution versions 12.1.1 through 12.1.3 Description The issue is related to insufficient input validation in the Install and Upgrade component of Oracle Transportation Execution. It allows a...

PT-2021-2865

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient input validation in the Kernel component of Oracle Solaris, which can be exploited by a low-privileged attacker with logon access to the infrastructure. Successful...

PT-2021-3024

Name of the Vulnerable Software and Affected Versions Oracle Advanced Supply Chain Planning versions 12.1 through 12.2 Description The issue is related to insufficient input validation in the Core component of Oracle Advanced Supply Chain Planning, allowing an unauthenticated attacker with networ...

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. Oracle Database Server suffers from an input validation error vulnerability that...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle. Oracle Solaris Kernel 11 contains a security vulnerability that can be exploited by an attacker to compromise Oracle Solaris by logging on to the infrastructure that executes Oracle Solaris. resulting in the unauthorized ability to cause Orac...

PT-2021-3033

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.7.33 and prior Oracle MySQL Server versions 8.0.23 and prior Description The issue is related to insufficient input validation in the Server: Audit Plug-in component of Oracle MySQL Server. This allows a...

PT-2021-2808

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 Description The issue is related to inadequate access control in the iRecruitment component of Oracle Human Resources, allowing a low-privileged attacker with network access via HTTP to compromise Oracle...

WordPress plugin has unspecified vulnerability (CNVD-2021-28749)

WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. wpDataTables is used in one of the chart management plugin . WordPress plugin WpDataTables - Tables & Table Charts...

Schneider Electric SoMachine Basic

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: SoMachine Basic Vulnerability: Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of this vulnerability may result in...

CVE-2021-1399: Authentication Bypass by Assumed-Immutable Data

A vulnerability in the Self Care Portal of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The...

The vulnerability in the implementation of the convertToHidl function of the Camera component in Android operating systems allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the implementation of the convertToHidl function of the Camera component in Android operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2019-10127

A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps the inherited ACL. In the default configuration, an attacker having...

Cybozu Office Operation Restriction Bypass Vulnerability (CNVD-2021-18064)

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. An operational restriction bypass vulnerability exists in the workflow in Cybozu Office. An attacker could exploit the vulnerability to alter workflow data without proper privileges...

Cybozu Office Operation Restriction Bypass Vulnerability

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. An operation restriction bypass vulnerability exists in the scheduler program in Cybozu Office. An attacker could use this vulnerability to alter data in the scheduler without proper privileges...

Cybozu Office Operation Restriction Bypass Vulnerability (CNVD-2021-18065)

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. An operation restriction bypass vulnerability exists in the bulletin boards in Cybozu Office. An attacker could use this vulnerability to change the data in the bulletin board without proper privileges...

The vulnerability of Cisco Webex Meetings Desktop App and Webex Productivity Tools, software for web conferencing solutions from Cisco Webex Meetings, on Windows operating systems, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Cisco Webex Meetings Desktop App and Webex Productivity Tools software for web conferencing on Windows operating systems is related to errors in handling requests. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by...

CVE-2021-22853

The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work...

Design/Logic Flaw

Calsos CSDJ CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00 and earlier allows remote attackers to bypass access restriction and to obtain unauthorized historical data without access privileges via unspecified vectors...