The vulnerability of the Security Framework component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...

Vulnerability of the Router component: The general proxy server of the Oracle MySQL Server database management system, which allows attackers to gain full control over the application.

Vulnerability of the Router component: The general proxy server, MySQL Router of the Oracle Database Management System, is associated with access control deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application using the HTTP...

The vulnerability of LiteLLM’s proxy server, related to the use of an unprotected alternative channel, allows attackers to execute arbitrary code.

The vulnerability of the LiteLLM proxy server is related to the use of an unprotected alternative channel. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the TarFile.ExtractToDirectory method in the .NET software platform allows a malicious actor to gain access to and modify data.

The vulnerability of the TarFile.ExtractToDirectory method in the .NET software platform is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability could allow an attacker to gain access to and modify data...

The vulnerability of the microprogramming software of Schneider Electric PowerLogic P7 relay protection devices, related to pointer assignment errors, allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of Schneider Electric PowerLogic P7 relay protection devices relates to pointer assignment errors. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the microprogramming software of the Schneider Electric PowerLogic P7 relay protection device, related to the failure to take measures to neutralize special elements, allows a intruder to execute arbitrary commands.

The vulnerability of the microprogramming software of Schneider Electric PowerLogic P7 relay protection devices relates to the lack of measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the Cisco Finesse operator automation software lies in improper external control of file names or paths, allowing a malicious actor to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability of the Cisco Finesse operator automation software lies in improper external control of file names or file paths. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or gain unauthorized access to protected information...

The vulnerability of the strchr() function in the Squid proxy server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the strchr function in the Squid proxy server is related to the escape from memory buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the ssh2_transport_read() function in the libssh2 library, which allows a hacker to execute arbitrary code.

The vulnerability of the ssh2transportread function in the libssh2 library is related to buffer overflows due to integer overflows. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using specially created SSH packets...

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protect...

The vulnerability of the Security Framework component of the Oracle WebCenter Portal, which allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to access control errors. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to gain unauthorized access to create, delete, or modify data.

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to access control errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to create, delete, or modify data...

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which facilitates simplified deployment of the Oracle Fusion Middleware software. This vulnerability allows a malicious individual to gain full control over the application.

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which is used for simplified deployment of the Oracle Fusion Middleware software, is related to access control errors. Exploiting this vulnerability could allow an attacker to gain full control over the...

The vulnerability of the microprogramming software of Schneider Electric PowerLogic P7 relay protection devices, related to the underutilization of the assert() function, allows a intruder to trigger a malfunction during maintenance.

The vulnerability of the microprogramming software of the Schneider Electric PowerLogic P7 relay protection device for electrical systems is related to the lack of use of the “assert” function. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...

The vulnerability of the Extensibility Framework component of the Oracle Enterprise Manager Base Platform allows a attacker to trigger a service failure.

The vulnerability of the Extensibility Framework component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Student Financials module of the Oracle PeopleSoft Enterprise Campus Solutions platform allows a hacker to gain access to read, modify, or delete data.

The vulnerability of the Student Financials module of the Oracle PeopleSoft Enterprise Campus Solutions platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

The vulnerability of the EAI component in the Oracle Siebel CRM system, which manages relationships with customers, allows a hacker to gain full access to the system.

The vulnerability of the EAI component in the Oracle Siebel CRM system, which is responsible for managing relationships with customers, relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker operating remotely to gain full access to the system...

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Authentication Engine component of the Oracle Access Manager control system allows a perpetrator to gain read, modify, or delete access to data.

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain read, modify, or delete privileges on data...

The vulnerability of the cap_set_file() function in the libcap library, which allows a hacker to increase their privileges

The vulnerability of the capsetfile function in the libcap library is related to synchronization errors when using a common resource “Race Condition”. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the XML component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the XML component of the Oracle Database Server system is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Core connector component in Oracle Identity Manager, a software platform of Oracle Fusion Middleware, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Core connector component in Oracle Identity Manager, a software platform of Oracle Fusion Middleware, is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to manipulate the confidentiality and integrity of...

The vulnerability of the WebCenter Sites component in the user-service provisioning application for the internet. Oracle WebCenter Sites allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebCenter Sites application component for online user services in Oracle WebCenter Sites relates to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the software for data integration and analytics in Hitachi Vantara Pentaho Data Integration & Analytics lies in the improper assignment of permissions to critical resources. This allows attackers to gain access to read, modify, or delete data.

The vulnerability of the Hitachi Vantara Pentaho Data Integration & Analytics software for data integration and analysis is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability may allow an attacker operating remotely to gain access to read,...

The vulnerability of the End User Self Service component of the identity management tool One Identity Manager allows a malicious actor to gain read, modify, or delete access to data.

The vulnerability of the End User Self Service component of the identity management tool, One Identity Manager, relates to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

The vulnerability of the WebCenter Sites component for user-serviceing applications on the internet allows a perpetrator to gain unauthorized access to create, delete, or modify data.

The vulnerability of the WebCenter Sites application component for online user services in Oracle WebCenter Sites is related to access control errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to create, delete, or modify data...

The vulnerability of the user_role function in the LiteLLM proxy server allows attackers to increase their privileges and gain full control over the proxy server.

The vulnerability of the userrole function in the LiteLLM proxy server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to increase their privileges and gain full control over the proxy server...

The vulnerability of Schneider Electric Saitel DR and Schneider Electric EasyLogic T150 management platforms lies in the insufficient protection of registration data, allowing unauthorized access by attackers to protected information.

The vulnerability of Schneider Electric Saitel DR and Schneider Electric EasyLogic T150 control platforms relates to insufficient protection for registration data. Exploiting this vulnerability can allow unauthorized actors to gain unauthorized access to protected information...

The vulnerability of the RDBMS component of the database management system Oracle Database Server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the RDBMS component of the database management system, Oracle Database Server, is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Extensibility Framework component of the Oracle Enterprise Manager Base Platform allows a attacker to trigger a service failure.

The vulnerability of the Extensibility Framework component of the Oracle Enterprise Manager Base Platform relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Shell component for VS Code’s command-line and code editor client, Oracle MySQL Shell, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Shell component in VS Code’s command-line and code editor client for Oracle MySQL Shell is related to access control deficiencies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the btool Configuration Helper tool, a software tool for working with machine learning algorithms like Splunk AI Tookit (formerly known as Splunk Machine Learning Toolkit (MLTK)), allows a perpetrator to execute arbitrary commands.

The vulnerability of the btool Configuration Helper tool of the Splunk AI Tookit formerly Splunk Machine Learning Toolkit MLTK relates to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker t...

The vulnerability of the command-line interface (CLI) of the Cisco Umbrella Virtual Appliance allows a perpetrator to escalate their privileges and execute arbitrary commands.

The vulnerability of the CLI interface of the Cisco Umbrella Virtual Appliance lies in the lack of access control when using the vmadmin account. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary commands...

The vulnerability of the Google Chrome browser’s Video component, which allows a hacker to obtain confidential information

The vulnerability of the Google Chrome browser’s Video component is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to obtain confidential information through a specially created HTML page...

The vulnerability of the Go language-based HTTP/2 protocol implementation allows attackers to induce service failures.

The vulnerability in the HTTP/2 implementation using the Go programming language arises from executing a loop with an unreachable exit condition when processing the value of SETTINGSMAXFRAMESIZE, which is equal to 0. Exploiting this vulnerability could allow a remote attacker to cause a service...

The vulnerability of the Portainer container management platform, related to the disclosure of information through a query string, allows a perpetrator to gain unauthorized access to the protected information.

The vulnerability of the Portainer container management platform is related to the disclosure of information through query strings. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the mbregexuringencoding() function in the PHP interpreter allows a hacker to trigger a service failure.

The vulnerability of the mbregexuringencoding function in the PHP interpreter is related to discrepancies in the lists of encodings between the Oniguruma library and mbfl, as a result of a pointer assignment error. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the urldecode() function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the urldecode function in the PHP programming language is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Shell component for VS Code, a command-line and code editor client of Oracle MySQL Shell, allows a hacker to gain full control over the system.

The vulnerability of the Shell component in VS Code’s command-line and code editor client for Oracle MySQL Shell is related to improper code generation management. Exploiting this vulnerability can allow an attacker operating remotely to gain full control over the system...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to access control errors. Exploiting this vulnerability could allow an attacker to gain full control over the...

The vulnerability of the Custom Resource Definition (CRD) component of the NGINX Gateway Fabric web server controller allows a attacker to read and modify data, or cause a service failure.

The vulnerability of the Custom Resource Definition CRD component of the NGINX Gateway Fabric web server controller is related to the failure to eliminate special elements when processing string values. Exploiting this vulnerability may allow an attacker to gain read and modify access to data, or...

The vulnerability of the gRPC-traffic routing function in the NGINX Gateway Fabric web server controller allows a attacker to cause a service failure.

The vulnerability of the gRPC-traffic routing function in the NGINX Gateway Fabric web server controller is related to improper array index checking. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the IBM Storage Protect Server (formerly Tivoli Storage Manager) software platform, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Storage Protect Server formerly Tivoli Storage Manager software platform lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Internal Operations component of the Oracle Process Manufacturing (OPM) application development system allows a perpetrator to gain full control over the application. This vulnerability exists in the Oracle E-Business Suite, a software suite for enterprise automation.

The vulnerability of the Internal Operations component of the Oracle Process Manufacturing Application for process development involves deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...

The vulnerability of the WinCC Certificate Manager in WinCC SCADA systems and WinCC Unified PC Runtime allows a intruder to gain unauthorized access to protected information.

The vulnerability of the WinCC Certificate Manager in WinCC SCADA systems is related to the unencrypted storage of credentials. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Program Compatibility Assistant Service in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Program Compatibility Assistant service for Windows systems is related to synchronization errors when using a common resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the JP2 image decoding decoder in the console-based image editing software ImageMagick allows a hacker to induce a service failure.

The vulnerability of the JP2 image decoding decoder in the console-based image editing software ImageMagick is related to a offset error of one unit. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...