Vulnerability of the Server component: The MySQL Server database management system’s partitioning scheme, which is vulnerable due to insufficient validation of input data.

Vulnerability of the MySQL Server component: The system management database MySQL Server’s partitioning mechanism is vulnerable due to insufficient validation of input data. Exploitation of this vulnerability can allow a malicious actor to execute a DoS attack remotely...

Jedox 代码问题漏洞

Jedox is a corporate performance management software from Jedox Inc. for planning, analyzing and reporting in finance and other areas such as sales, human resources and purchasing. A code issue vulnerability exists in Jedox version 2020.2.5, which stems from incorrect input validation of the...

PT-2023-15510 · Jedox · Jedox

Name of the Vulnerable Software and Affected Versions: Jedox version 2020.2.5 Description: The issue is related to incorrect input validation for the default-storage-path in the settings page, allowing remote, authenticated users to specify the location as the Webroot directory. This can lead to...

CVE-2022-35898

OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation. This allows any authenticated user to change the password of any other user, including the Administrator account...

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows a perpetrator to cause a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures using the T3 network...

IBM Cloud Pak for Data 代码问题漏洞

IBM Cloud Pak for Data is a data and AI platform with data structure from International Business Machines IBM. All data can be made available for AI and analytics on any cloud. An arbitrary file upload vulnerability exists in IBM Cloud Pak for Data version 4.5, 4.6. The vulnerability stems from t...

PT-2023-2580 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.1, 11.1, and 11.5 Description: The issue is related to insufficient input validation in the database management system, which can be exploited by a remote attacker to...

The vulnerability of the PostScript Printer Driver (Pscript) and PCL6 Class Printer drivers for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PostScript Printer Driver Pscript and PCL6 Class Printer operating systems on Windows is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created XPS file...

CVE-2023-27354

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the SMB directory query command. The...

OpenJDK: certificate validation issue in TLS session negotiation (8298310)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit...

PT-2023-2526 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19c and 21c Description: The issue is related to insufficient input validation in the Java VM component of the Oracle Database Server. This can be exploited by a remote attacker to gain read, modify, add, or...

PT-2023-2662 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.32 and prior Description: The issue exists due to insufficient input validation in the Server: Components Services component of MySQL Server, allowing a remote attacker to cause a denial of service. Successful attack...

PT-2023-2492 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.32 and prior Description: The issue is related to insufficient input validation in the Server: Partition component of MySQL Server, allowing a high-privileged attacker with network access via multiple protocols to...

PT-2023-2667 · Oracle · Oracle Bi Publisher

Name of the Vulnerable Software and Affected Versions: Oracle BI Publisher version 6.4.0.0.0 Description: The issue exists due to insufficient input validation in the Security component of Oracle BI Publisher. This allows a remote attacker to disclose sensitive information using HTTP requests...

PT-2023-2637 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.41 and prior MySQL Server versions 8.0.30 and prior Description: The issue allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, resulting in the unauthorized abili...

The vulnerability of the Envoy proxy server, related to insufficient validation of input data, allows attackers to bypass authentication procedures and gain unauthorized access to protected information.

The vulnerability of the Envoy proxy server is related to insufficient validation of input data during the processing of the x-envoy-original-path header. Exploiting this vulnerability allows a malicious actor to bypass authentication using a JSON Web Token JWT and gain unauthorized access to...

Adobe Substance 3D Designer DAE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2023-2302 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to insufficient input validation in the Windows DNS server, which can be exploited by a remote attacker to execute arbitrary code. This can affect the system...

PT-2023-20462

Name of the Vulnerable Software and Affected Versions Lexmark devices through 2023-02-19 Description The issue is related to mishandling Input Validation. A proof of concept PoC has been published for a critical vulnerability in Lexmark printers, which allows for privilege escalation. There have...

PT-2023-20461 · Lexmark · Lexmark

Name of the Vulnerable Software and Affected Versions: Lexmark devices through 2023-02-19 Description: The issue is related to Improper Validation of an Array Index, which can lead to an Out-Of-Bounds Read and potentially allow Remote Code Execution. This was demonstrated in a real-world scenario...