CVE-2024-20924

Oracle Audit Vault and Database Firewall (Firewall component) is affected in versions 20.1–20.9. The root cause is insufficient input validation in the Firewall, enabling a high-privilege attacker with network access via Oracle Net to compromise the system. Successful attacks require user interac...

CVE-2024-20912

Oracle Audit Vault and Database Firewall (Firewall component) versions 20.1–20.9 are affected. Root cause: insufficient input validation in the Firewall, enabling a high-privilege attacker with network access via Oracle Net to read/modify/delete data. Impact matches unauthorized updates/inserts/d...

CVE-2024-20910

CVE-2024-20910 affects Oracle Audit Vault and Database Firewall (Firewall component). Versions 20.1–20.9 are affected. The issue allows a high-privilege attacker with network access via Oracle Net to read data from the vault/firewall, with the attack surface potentially impacting related Oracle p...

PT-2024-1156 · Oracle · Oracle Audit Vault/Database Firewall

Name of the Vulnerable Software and Affected Versions: Oracle Audit Vault and Database Firewall versions 20.1 through 20.9 Description: The issue is related to insufficient input validation in the Firewall component of Oracle Audit Vault and Database Firewall, allowing a remote attacker to gain...

PT-2024-1157 · Oracle · Oracle Audit Vault/Database Firewall

Name of the Vulnerable Software and Affected Versions: Oracle Audit Vault and Database Firewall versions 20.1 through 20.9 Description: The issue is related to insufficient input validation in the Firewall component of Oracle Audit Vault and Database Firewall, allowing an unauthenticated attacker...

Oracle Audit Vault and Database Firewall Security Vulnerabilities

Oracle Audit Vault and Database Firewall is a database security solution from Oracle Corporation. A security vulnerability exists in Oracle Audit Vault and Database Firewall versions 20.1 through 20.9. An attacker could exploit the vulnerability to take over Oracle Audit Vault and Database Firewa...

PT-2024-1219 · Oracle · Oracle Audit Vault/Database Firewall

Name of the Vulnerable Software and Affected Versions: Oracle Audit Vault and Database Firewall versions 20.1 through 20.9 Description: The issue is related to insufficient input validation in the Firewall component of Oracle Audit Vault and Database Firewall. It allows a high-privileged attacker...

PT-2024-1155 · Oracle · Oracle Audit Vault/Database Firewall

Name of the Vulnerable Software and Affected Versions: Oracle Audit Vault and Database Firewall versions 20.1 through 20.9 Description: The issue is related to insufficient input validation in the Firewall component of Oracle Audit Vault and Database Firewall, allowing a remote attacker to gain...

Oracle Audit Vault and Database Firewall Security Vulnerabilities

Oracle Audit Vault and Database Firewall is a database security solution from Oracle Corporation. A security vulnerability exists in Oracle Audit Vault and Database Firewall versions 20.1 through 20.9. An attacker could exploit the vulnerability to perform unauthorized updates, insertions, or...

Oracle Audit Vault and Database Firewall Security Vulnerabilities

Oracle Audit Vault and Database Firewall is a database security solution from Oracle Corporation. A security vulnerability exists in Oracle Audit Vault and Database Firewall versions 20.1 through 20.9. An attacker could exploit the vulnerability to access sensitive data...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: goreleaser, crossplane-provider-aws-kinesis, tekton-chains, sops, crossplane-provider-aws-elasticache, spire-server, flux-notification-controller, crossplane-provider-aws-firehose, crossplane-provider-aws-sqs, crossplane-provider-aws-eks, zarf, cosign, gomplate,...

CVE-2023-5138 Glitch detection not active by default in Silicon Labs Secure Vault High devices

Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B...

CVE-2023-5138 Glitch detection not active by default in Silicon Labs Secure Vault High devices

Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B...

PT-2024-14101 · Silicon +1 · Efr32Xg21B +2

Name of the Vulnerable Software and Affected Versions: Silicon Labs secure vault high parts EFx32xG2xB versions except EFR32xG21B Description: Glitch detection is not enabled by default for the CortexM33 core in the affected parts. Recommendations: For Silicon Labs secure vault high parts...

GHSA-MHPQ-9638-X6PW vulnerabilities

Vulnerabilities for packages: jitsucom-bulker...

GHSA-MHPQ-9638-X6PW vulnerabilities

Vulnerabilities for packages: jitsucom-bulker...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: ollama, nri-kafka, rekor, kubernetes, terraform-provider-sendgrid-fips, dockerize-fips, nri-mssql, tigera-operator, k3s, temporal-ui-server-fips, cosign, frp, prometheus-stackdriver-exporter, vault-k8s-fips, metrics-server-fips, dynamic-localpv-provisioner, gobuster,...

The vulnerability of the `max_request_duration` component in the platform for archiving corporate information, HashiCorp Vault and Vault Enterprise, allows a perpetrator to trigger a service failure.

The vulnerability of the maxrequestduration component in the HashiCorp Vault and Vault Enterprise platforms for archiving corporate information involves unlimited resource allocation during HTTP request processing. Exploiting this vulnerability could allow a malicious actor to cause service...

Denial Of Service (DoS)

HashiCorp Vault is vulnerable to Denial of Service. The vulnerability is caused due to the unbounded memory copy operation during the processing of inbound HTTP requests.This could lead to memory exhaustion within the host when handling large unauthenticated and authenticated HTTP requests from a...

CVE-2023-6337

A flaw was found in HashiCorp Vault and Vault Enterprise 1.12.0. When handling large HTTP requests from a client, Vault will attempt to map the request to memory, resulting in the exhaustion of available memory on the host, which may cause Vault to crash...