5317 matches found
PT-2024-4898 · Oracle · Oracle E-Business Suite
Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the Attribute Admin Setup component of Oracle Partner Management. This allows an unauthenticated attacker with netwo...
PT-2024-4912 · Oracle · Oracle Outside In Technology
Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.6 through 8.5.7 Description: The issue exists due to insufficient input validation in the Outside In Core component of Oracle Outside In Technology. Exploitation can allow an attacker to impact the...
PT-2024-3074 · Oracle · Oracle Enterprise Manager Base Platform
Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Manager Base Platform version 13.5.0.0 Description: The issue is related to insufficient input validation in the Host Management component of the Oracle Enterprise Manager Base Platform. This allows a low-privileged attacker...
PT-2024-3720 · Oracle · Oracle Complex Maintenance
Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue exists due to insufficient input validation in the LOV component of the Oracle Complex Maintenance, Repair, and Overhaul application. This...
PT-2024-4888 · Oracle · Oracle E-Business Suite
Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul. This allows an unauthenticated attacker with...
PT-2024-4889 · Oracle · Oracle E-Business Suite +1
Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the Data Provider UI component of Oracle Installed Base, allowing an unauthenticated attacker with network access vi...
Juniper Networks Junos OS 安全漏洞
Juniper Networks Junos OS is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS Before 21.2R3-S8-EVO, 21.4-EVO through 21.4R3-S6-EVO, 22.2-EVO throug...
The vulnerability of Dell Enterprise SONiC operating systems, related to insufficient validation of input data, allows attackers to escalate their privileges.
The vulnerability of Dell Enterprise SONiC operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
PT-2024-8500
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the netfilter component of the Linux kernel and is caused by incomplete validation of user input. This can potentially allow an attacker to cause a denial of...
CVE-2024-25646
Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application...
CVE-2024-27898
SAP NetWeaver application, due to insufficient input validation, allows an attacker to send a crafted request from a vulnerable web application targeting internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request...
PT-2024-3064 · Microsoft · Ole Db Driver For Sql Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This can be exploited by a remote attacker using speciall...
PT-2024-2781 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Secure Boot protocol in Windows operating systems, specifically due to insufficient input validation. This can allow a remote attacker to...
PT-2024-3112 · Microsoft · Ole Db Driver For Sql Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft OLE DB Driver for SQL Server, which can be exploited by a remote attacker to execute...
PT-2024-3128 · Microsoft · Ole Db Driver For Sql Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...
Devolutions Server 安全漏洞
Devolutions Server is an application from Devolutions Canada Inc. which provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.1.10.0 and earlier, which stems from incorrect input validation and allows an attack...
Huawei HarmonyOS 安全漏洞
Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...
PT-2024-2972 · Sap · Sap Businessobject Business Intelligence Launch Pad
Name of the Vulnerable Software and Affected Versions: SAP BusinessObject Business Intelligence Launch Pad affected versions not specified Description: The issue is related to improper validation in SAP BusinessObject Business Intelligence Launch Pad, allowing an authenticated attacker to access...
SUSE CVE-2023-38709
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58...
PT-2024-12257 · Nvidia · Nvidia Nvjpeg2000 Library
Name of the Vulnerable Software and Affected Versions: NVIDIA nvJPEG2000 Library for Windows and Linux affected versions not specified Description: The NVIDIA nvJPEG2000 Library contains a vulnerability due to improper input validation, which could allow an attacker to use a specially crafted inp...