Linux drivers/crypto/ccp/sev-dev.c DoS

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ansible.posix authorized_key Privilege Escalation

The vulnerability of the keyfile function in the ansible.posix.authorizedkey module is related to the incorrect definition of symbolic links when managing SSH keys. Exploiting this vulnerability could allow an attacker to enhance their privileges...

libcurl WebSocket DoS

The vulnerability of the WebSocket component in the libcurl library of the cURL software’s server interaction mechanism is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Oracle WebCenter Content Unauthorized Access

Vulnerability of the Core component of the Oracle WebCenter Content application: The Imaging platform of Oracle WebCenter Content is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Cluster NDB Operator Privilege Escalation

Vulnerability of the Cluster component: The NDB Operator technology for distributed data storage in MySQL NDB Cluster is vulnerable due to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges and cause service failures using the HTTP...

Oracle Financial Services Analytical Applications Infrastructure Unauthorized Access

The vulnerability of the Oracle Financial Services Analytical Applications Infrastructure platform component related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through HTTP request...

IBM Jazz Foundation Authorization Bypass

The vulnerability of the integrated environment for managing the development lifecycle of IBM Jazz Foundation is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

OpenBao encryption Authentication Unauthorized Access

The vulnerability of the TLS certificate authentication method used by the OpenBao encryption system is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the protected information...

OpenBao encryption Privilege Escalation

The vulnerability of the OpenBao encryption and secret management system is related to errors in restricting the assignment of security tokens. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

Linux Queue RQ DoS

The vulnerability of the queuerq function in Linux operating systems is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux driver multi-touch DoS

The vulnerability in the driver/multi-touch.c module of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the pinuserpagesfast function in the Linux operating system’s kernel is related to deficiencies in error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux fd_execute_rw_aio() DoS

The vulnerability of the fdexecuterwaio function in the Linux operating system is related to the lack of initialization for variables. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Linux HID DoS

The vulnerability of the drivers/hid/hid-logitech-hidpp.c module in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux tcm_loop_target_reset Heap Buffer Overflow DoS

The vulnerability of the tcmlooptargetreset function in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Module Drivers Crypto CAAM Hash DoS

The vulnerability in the drivers/crypto/caam/caamhash.c module of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux f2fs_rename Heap Buffer Overflow DoS

The vulnerability of the f2fsrename function in the Linux operating system is related to a potential memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux virt_wifi Module Buffer Overflow DoS

The vulnerability in the drivers/net/wireless/virtual/virtwifi.c module of the Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Oracle E-Business Suite Knowledge Integration Sub-component Unauthenticated Access

The vulnerability of the Knowledge Integration sub-component of the Oracle HCM Common Architecture component in the Oracle E-Business Suite relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...

Oracle WebLogic Server Unauthorized Access

The vulnerability of the Web Services component of the Oracle WebLogic Server application server is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through HTTP...

Oracle WebLogic Server Data Compromise

The vulnerability of the Oracle WebLogic Server application server’s Core component is related to access control errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

AnyDesk Buffer Overflow

The vulnerability of AnyDesk remote access and management software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted package...

OpenBao encryption JWT/OIDC XSS

The vulnerability of the JWT/OIDC authentication method of the OpenBao encryption system is related to the lack of mechanisms for encoding or shielding the output data. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

MySQL PostgreSQL ProxySQL Memory Corruption

The vulnerability of the MySQL and PostgreSQL proxy-server protocol implementations relates to the execution of operations outside the memory buffer. Exploiting this vulnerability can allow a malicious actor to induce memory corruption...

Linux driver module Heap Buffer Overflow DoS

The vulnerability in the drivers/hid/hid-core.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Student Financials Module Data Access

The vulnerability of the Student Financials module of the Oracle PeopleSoft Enterprise Campus Solutions platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

libssh2 Heap Buffer Overflow RCE

The vulnerability of the ssh2transportread function in the libssh2 library is related to buffer overflows due to integer overflows. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using specially crafted SSH packets...

Oracle WebCenter Content Data Compromise

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to access control errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Oracle Enterprise Manager Extensibility Framework DoS

The vulnerability of the Extensibility Framework component of the Oracle Enterprise Manager Base Platform relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ADF Faces Framework Unauthorized Access

The vulnerability of the ADF Faces framework in the Oracle Application Development Framework is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, update, add, or delete protected information...

Oracle WebCenter Sites Data Compromise

The vulnerability of the WebCenter Sites application component for online user services in Oracle WebCenter Sites is related to access control errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Security Framework Component Unauthorized Access

The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to access control errors. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or cause service failures...

Oracle WebCenter Content Unauthorized Access

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

One Identity Manager Identity Access

The vulnerability of the End User Self Service component of the identity management tool, One Identity Manager, relates to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

JADM Component Information Disclosure

The vulnerability of JADM components, a software for JVM diagnostics and monitoring within Oracle Application Performance Management, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information or cause service...

Oracle WebCenter Content Data Access

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

Schneider Electric PowerLogic P7 Relay Underutilization Assert

The vulnerability of the microprogramming software of the Schneider Electric PowerLogic P7 relay protection device for electrical systems is related to the lack of use of the “assert” function. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...

Oracle Database Server Unauthorized Access

The vulnerability of the RDBMS component of the database management system, Oracle Database Server, is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Oracle Enterprise Manager Event Management Data Compromise

The vulnerability of the Event Management component of the Oracle Enterprise Manager Base Platform is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and...

Oracle Enterprise Manager Extensibility Framework DoS

The vulnerability of the Extensibility Framework component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Enterprise Infrastructure Security Full Access

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools management system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain full access to the system...

Oracle WebCenter Sites Data Compromise

The vulnerability of the WebCenter Sites application component for online user services in Oracle WebCenter Sites relates to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Oracle WebCenter Content Core Component Data Compromise

Vulnerability of the Core component of the Oracle WebCenter Content application: The Imaging platform of Oracle WebCenter Content is vulnerable due to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity,...

Oracle Identity Manager Legacy UI Data Compromise

The vulnerability of the OIM Legacy UI component of the Oracle Identity Manager is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Oracle Access Manager Authentication Engine Privilege Escalation

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain read, modify, or delete privileges on data...

Oracle WebCenter Content Data Access

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

Oracle WebCenter Content Full Control

Vulnerability of the Core component of the Oracle WebCenter Content application: The Imaging platform of the Oracle WebCenter Content system is vulnerable due to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the...

NVIDIA Virtual GPU Manager Data Compromise

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

LiteLLM proxy server Privilege Escalation

The vulnerability of the userrole function in the LiteLLM proxy server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to increase their privileges and gain full control over the proxy server...

TarFile ExtractToDirectory Data Access

The vulnerability of the TarFile.ExtractToDirectory method in the .NET software platform is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability could allow an attacker to gain access to and modify data...