CVE-2022-21281: Undefined Security Weakness

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows high privileged attacker with...

CVE-2022-21403: Undefined Security Weakness

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications component: Mediation Engine. Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2022-21382: Undefined Security Weakness

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

PT-2022-2197

Name of the Vulnerable Software and Affected Versions Oracle Communications Operations Monitor versions 3.4, 4.2, 4.3, 4.4, and 5.0 Description The issue is related to insufficient input validation in the Mediation Engine component. It allows a low-privileged attacker with network access via HTTP...

CVE-2022-21378: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

PT-2022-2101

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue is related to insufficient input validation in the Oracle WebLogic Server Core component. This can be exploited by a...

Oracle Communications 输入验证错误漏洞

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation. an authorization issue vulnerability exists in Oracle Communications Convergence that could be...

PT-2022-2105

Name of the Vulnerable Software and Affected Versions Primavera Portfolio Management versions 18.0.0.0 through 18.0.3.0 Primavera Portfolio Management versions 19.0.0.0 through 19.0.1.2 Primavera Portfolio Management versions 20.0.0.0 through 20.0.0.1 Description The issue is related to...

New macOS vulnerability, “powerdir,” could lead to unauthorized user data access

Following our discovery of the “Shrootless” vulnerability, Microsoft uncovered a new macOS vulnerability, “powerdir,” that could allow an attacker to bypass the operating system’s Transparency, Consent, and Control TCC technology, thereby gaining unauthorized access to a user’s protected data. We...

Philips Engage Software 安全漏洞

Philips Engage Software is used by the Dutch company Philips to convert visitors into qualified leads. A security vulnerability exists in Philips Engage Software that stems from improper access control. An attacker could exploit the vulnerability to gain unauthorized access to sensitive data...

UBUNTU-CVE-2021-4135

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsimmapallocelem being called. A local user could use this flaw to get unauthorized access to some data...

CVE-2021-0961

An uninitialized data read flaw in the Linux kernel Android enhanced xtquota that can count upwards and in packets functionality was found in the way user calls function quotaprocwrite. A local user could use this flaw to get unauthorized data access...

CVE-2021-36780 Unauthorized data access from replicas through vulnerable instance manager pods

A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a replica that they should not have access to. This issue affects: SUSE Longhorn...

CVE-2021-36780: Missing Authentication for Critical Function

A Missing Authentication for Critical Function vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a replica that they should not have access to. This issue affects: SUSE Longhorn...

CVE-2021-20865: Missing Authorization

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse unauthorized data via unspecified vectors...

The vulnerability of the Contacts Picker component in the Google Chrome browser allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the Contacts Picker component in the Google Chrome browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain unauthorized access to protected information through a specially creat...

Philips Patient Information Center iX 安全漏洞

Philips Patient Information Center iX Philips Patient Information Center PIC iX, a Philips company in Europe, is at the heart of our patient monitoring system, which facilitates understanding of the patient's condition and helps caregivers to identify potential deterioration at an early stage, as...

Philips Patient Information Center iX 输入验证错误漏洞

Philips Patient Information Center iX Philips Patient Information Center PIC iX, a Philips company in Europe, is at the heart of our patient monitoring system, which facilitates understanding of the patient's condition and helps caregivers to identify potential deterioration at an early stage, as...

OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows low privileged attack...

The vulnerability in the set of tools provided by Google Chrome’s DevTools allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the DevTools set of tools in the Google Chrome browser is related to errors in implementing security checks. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures...