Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions that originates from a missing authorization in maxprofile/user-groups/routes.lua. An attacker can exploit the...

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions. An attacker could exploit the vulnerability to overwrite arbitrary files via a specially crafted HTTP request...

Q-Free MAXTIME Suite 访问控制错误漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. An access control error vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from a lack of authentication for critical functions in maxprofile/setup/routes.lua. An...

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions that originates from a missing authorization in maxprofile/user-groups/routes.lua. An attacker can exploit the...

CVE-2024-27781

An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all...

CVE-2024-52606

SolarWinds Platform is affected by server-side request forgery vulnerability. Proper input sanitation was not applied allowing for the possibility of a malicious web request...

SolarWinds Platform 代码问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from SolarWinds USA. A code issue vulnerability exists in versions of SolarWinds Platform prior to 2025.1 that stems from a failure to apply proper input cleanup, which could lead to the possibility of...

The vulnerability of Zyxel network device software of the CPE series exists due to the lack of measures taken to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary commands.

The vulnerability of Zyxel network devices of the CPE series exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with privileges as “supervisor” or...

The vulnerability of the Security component of the Oracle Communications Order and Service Management system allows a perpetrator to disclose protected information.

The vulnerability of the Security component of the Oracle Communications Order and Service Management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through HTTP requests...

The vulnerability of the Four-Faith F3x36 microprogrammed router server lies in the lack of authentication for a critical function, allowing an attacker to modify the device’s configuration.

The vulnerability of the Four-Faith F3x36 microprogrammed router software server lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to remotely modify the device’s configuration by sending specially crafted HTTP requests...

The vulnerability of the Panel Processor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain read access to data.

The vulnerability of the Panel Processor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to data reading through HTTP requests...

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application allows a attacker to gain read access to data or modify data.

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain read access to data or modify data through HTTP...

The vulnerability of the Core server component of Oracle WebLogic Server allows a attacker to trigger a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server is related to the exhaustion of memory resources. Exploiting this vulnerability can allow a malicious actor to cause service failures through HTTP requests...

The vulnerability of the Security component of the Oracle Communications Order and Service Management system allows a perpetrator to gain read, modify, add, or delete access to data, or cause a partial service disruption.

The vulnerability of the Security component of the Oracle Communications Order and Service Management system is related to a data source validation error. Exploiting this vulnerability may allow an attacker, operating remotely, to gain read, modify, add, or delete access to data, or cause a parti...

The vulnerability of the Design Tools component of the JD Edwards EnterpriseOne Tools system, which manages enterprise resources, allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Design Tools component of the JD Edwards EnterpriseOne Tools system’s resource management system is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, add, or delete data through HTTP requests...

The vulnerability of the Admin Screens and Grants UI components of the Oracle Workflow system allows a malicious individual to gain read access to data or to modify, add, or delete data.

The vulnerability of the Admin Screens and Grants UI component of the Oracle Workflow system relates to improper storage of permissions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read access to data or to modify, add, or delete data through HTTP requests...

The vulnerability of the Cash Management component of the PeopleSoft Enterprise FIN Cash Management software allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Cash Management component of the PeopleSoft Enterprise FIN Cash Management software lies in the lack of authentication mechanisms. Exploiting this vulnerability allows an attacker to manipulate the confidentiality and integrity of the protected information through HTTP...

The vulnerability of the Oracle Financial Services Behavior Detection Platform component in the bank analytics system’s simulation model for Oracle Financial Services Applications allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Oracle Financial Services Behavior Detection Platform component in the bank analytics system’s simulation model exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of...

The vulnerability of the General component in Oracle Application Express development environment allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the General component in Oracle Application Express development relates to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of protected information through HTTP requests...

The vulnerability of the Agile Integration Services component of the Oracle Agile PLM Framework’s product lifecycle management software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Agile Integration Services component of the Oracle Agile PLM Framework management software lifecycle management system is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability allows an attacker to influence the...