Oracle WebCenter Portal Runtime Tools Full Control

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

Oracle WebCenter Portal Runtime Tools Full Control

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal web platform is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

Messaging Enabler Component Full Control

The vulnerability of the Messaging Enabler component of the Service Delivery Platform software, part of the Oracle Fusion Middleware software platform, is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to...

MediaWiki apiUserrights.php Unauthorized Access

The vulnerability of the MediaWiki hypertext environment implementation, including the apiUserrights.php tool, is related to insufficient protection of operational data. Exploitation of this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

N-able N-central Authentication Bypass

The vulnerability of the authentication mechanism of the N-able N-central platform for monitoring and managing IT infrastructure is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

ipvs Heap Buffer Overflow DoS

The vulnerability of the ipvsbinddest function in the ipvs component of the Linux operating system’s kernel is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Rsync Uncontrolled Resource Consumption DoS

The vulnerability of the Rsync file transfer and synchronization utility is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

rsync Network Daemon Heap Buffer Overflow DoS

The vulnerability of the addimpliedinclude function in the rsync network daemon—a utility for transferring and synchronizing files—is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Rsync read_args Heap Buffer Overflow DoS

The vulnerability of the readargs function in the Rsync utility for file transfer and synchronization is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Rsync DoS

The vulnerability of the Rsync file transfer and synchronization utility is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Rsync Hash Search DoS

The vulnerability of the hashsearch function in the Rsync file transfer and synchronization utility is related to its inefficient algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

SSDP Component Arbitrary Command Execution

The vulnerability of the ssdpcgimain function in the SSDP component of the D-Link DIR-820LW router’s software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

D-Link DI-8100 router Code Execution

The vulnerability of the fileextenasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DIR-645 Router Code Execution

The vulnerability of the hedwigcgimain function in D-Link DIR-645 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

D-Link DWR-M960 Router Code Execution

The vulnerability of the sub452CCC function in D-Link DWR-M960 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

D-Link DI-8100 router CGI Endpoint Heap Buffer Overflow DoS

The vulnerability of the tgfilehtm function in the CGI Endpoint of the D-Link DI-8100 router’s microprogramming system is related to the issue of writing operations outside of the buffer in memory when processing the fn parameter. Exploiting this vulnerability allows an attacker to execute...

Oracle Database Server Unauthorized Access

The vulnerability of the RDBMS component of the database management system, Oracle Database Server, is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Java VM Oracle Database Server Compromise

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system using network protocols...

Apache HTTP Server Plugin Full Control

The vulnerability of the Apache Plugin component of the Oracle HTTP Server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the server using the HTTPS protocol...

Oracle Identity Manager Legacy UI Access Manipulation

The vulnerability of the OIM Legacy UI component of the Oracle Identity Manager software platform in Oracle Fusion Middleware is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to create, delete, or alter access to critical...

JavaFX Component Compromise

The vulnerability of the JavaFX component of Oracle Java SE software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system using network protocols...

Enterprise Infrastructure Security Full Control

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools management system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application...

Enterprise Infrastructure Security DoS

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP network protocol...

Oracle Access Manager Authentication Engine Full Control

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application through the HTTP...

Oracle WebCenter Portal Runtime Tools Full Control

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

Oracle WebCenter Portal Runtime Tools Full Control

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

Oracle WebCenter Portal Runtime Tools Full Control

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

PeopleSoft Enterprise Common Application Objects Unauthorized Access

The vulnerability of Common Application Objects in the PeopleSoft Enterprise Business Process Management tool relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

Security Component Full Control

The vulnerability of Oracle PeopleSoft Enterprise Campus Solutions’ Security component is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to gain full control over the application using the HTTPS protocol...

Marketing Component Oracle Siebel CRM Full Control

The vulnerability of the Marketing component of the Oracle Siebel CRM system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP network protocol...

MediaWiki Parser XSS

The vulnerability of the parser script included in the MediaWikia hypertext environment’s implementation lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

syntaxhighlight.php XSS

The vulnerability of the syntaxHighlight.php script used by the MediaWiki hypertext environment is related to insufficient protection of the web page structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...

Linux nf_queue Module Data Compromise

The vulnerability of the nfqueue module in the Linux operating system’s kernel is related to out-of-buffer writing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux IPv6 fib6_rule_suppress() Heap Buffer Overflow

The vulnerability of the fib6rulesuppress function in the net/ipv6/fib6rules.c module of the Linux operating system’s IPv6 kernel implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentialit...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the ip6ip6err function in the net/ipv6/ip6tunnel.c module of the Linux operating system’s IPv6 kernel implementation is related to buffer out-of-buffer writing. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

RouterOS SSH Server Data Compromise

The vulnerability of the SSH server on the RouterOS operating system of MikroTik is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

D-Link DIR-513 Router DoS

The vulnerability of the goform/formSetWizardSelectMode function in the D-Link DIR-513 router microprogramming system is related to the writing beyond buffer boundaries when processing the curTime parameter. Exploiting this vulnerability could allow an attacker to cause a service failure by sendi...

D-link DIR-823G Router Privilege Management

The vulnerability of D-link DIR-823G router microprogramming software is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

D-Link DIR-513 Router DoS

The vulnerability of the formAdvanceSetup function in the /goform/formAdvanceSetup file of the POST Request Handler component of the D-Link DIR-513 router microprogramming system is related to the copying of buffer data without checking the size of the input data during the processing of the...

JavaFX Component Compromise

The vulnerability of the JavaFX component of Oracle Java SE software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system using network protocols...

MySQL Cluster Connection Handling DoS

The vulnerability of the Server: Connection Handling component of the MySQL Cluster database management system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

Oracle Access Manager Authentication Engine Full Control

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain full control over the system using the HTTP network protocol...

Oracle Access Manager Authentication Engine Full Control

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain full control over the system using the HTTP network protocol...

Oracle Unified Directory OUD Core Full Control

The vulnerability of the OUD Core component of the Oracle Unified Directory application, a simplified deployment solution for the Oracle Fusion Middleware software platform, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker ...

Oracle WebCenter Enterprise Capture Client Bundle Full Control

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...

Oracle Unified Directory OUD Core Full Control

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which is used for simplified deployment of the Oracle Fusion Middleware software, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control...

Security Framework Component Full Control

The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

Oracle Unified Directory OUD Core Full Control

The vulnerability of the OUD Core component of the Oracle Unified Directory application, which is used for simplified deployment of the Oracle Fusion Middleware software, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control...

Oracle WebCenter Portal Runtime Tools Full Control

The vulnerability of the Runtime Tools component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

MediaWik XSS

The vulnerability in the scripts included/language/language.php, includes/logging/blockLogFormatter.php, includes/logging/logFormatter.php, includes/logging/patrolLogFormatter.php, includes/logging/renameuserLogFormatter.php, includes/logging/tagLogFormatter.php, and...