CVE Vulnerability Catalog

Vulnerability in Oracle Flow Manufacturing (component: Security) versions 12.2.9-12.2.15. A low-privileged attacker with network access via SQL can easily exploit this flaw, leading to system takeover.

Vulnerability in the Net Service component of Oracle Database Server versions 23.4.0-23.26.2. An unauthenticated attacker with network access via TLS can cause a hang or frequent crash (full DOS) of the service.

Vulnerability in the Net Service component of Oracle Database Server versions 23.4.0-23.26.2. An unauthenticated attacker with network access via TLS can cause a hang or frequently repeatable crash (complete DOS) of Net Service.

Vulnerability in Oracle REST Data Services in the Mongoapi component. Versions 24.2.0-26.1.0 are affected. An unauthenticated attacker with network access via HTTPS can cause a complete denial of service (DOS) by hanging or repeatedly crashing the service.

A vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) allows a low-privileged attacker with network access via HTTP to compromise data confidentiality and integrity. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data and access to all Oracle Payroll data.

A vulnerability in Oracle Payroll product of Oracle E-Business Suite (Self Service Manager component) allows a low-privileged attacker with network access via HTTP to compromise the system. Affected versions are 12.2.3-12.2.15.

A vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) allows a low-privileged attacker with network access via HTTPS to take over the system. The flaw affects versions 12.2.3-12.2.15 and has a high CVSS score of 8.8.

Vulnerability in Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Affects versions 12.2.6-12.2.15. A low-privileged attacker with network access via HTTPS can easily exploit this flaw, leading to unauthorized access to critical data or full access to all data in the product, with potential impact on other products (scope change).

Vulnerability in Oracle Financials Common Modules of Oracle E-Business Suite (component: Common Components) in versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw, leading to unauthorized access to critical data or full access to all module data.

Vulnerability in Oracle Financials Common Modules of Oracle E-Business Suite (component: Common Components) in versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw, leading to unauthorized access to critical data or full access to all module data, as well as unauthorized update, insert, or delete access to some data.

A vulnerability in Oracle Payments product of Oracle E-Business Suite (component: File Transmission) allows an unauthenticated attacker with network access via HTTPS to compromise data confidentiality and integrity. The attack is difficult to exploit but can result in unauthorized creation, deletion, or modification of critical data and full access to all Oracle Payments data.

In Mantis Bug Tracker (MantisBT) prior to version 2.28.2, a vulnerability allows code execution. An attacker can use the show_inline=1 parameter and a valid file_show_inline_token CSRF token on file_download.php to upload a crafted XHTML attachment referencing a JavaScript attachment.

In Mantis Bug Tracker (MantisBT) versions 1.3.0 through 2.28.1, an unescaped project name allows an attacker with manager or administrator privileges to inject HTML on the Move Attachments admin page. The vulnerability is fixed in version 2.28.2.

W Kibana występuje podatność typu Server-Side Request Forgery (CWE-918), która pozwala uwierzytelnionym użytkownikom z uprawnieniami do zarządzania konektorami na obejście listy dozwolonych połączeń skonfigurowanej przez operatora. Atakujący może skonfigurować konektor Webhook z odpowiednio spreparowanym celem, co skutkuje wysyłaniem żądań wychodzących do zablokowanych lokalizacji.

Mantis Bug Tracker (MantisBT) to otwarte oprogramowanie do śledzenia problemów. W wersjach od 2.23.0 do 2.28.1 brak weryfikacji uprawnień w funkcji widoczności plików pozwala każdemu uwierzytelnionemu użytkownikowi (REPORTER+) na pobieranie załączników z prywatnych notatek błędów, do których nie powinien mieć dostępu, za pośrednictwem punktów końcowych REST API oraz SOAP API.

Podatność w Oracle REST Data Services (komponent: Core) dotyczy wersji 24.2.0-26.1.0. Umożliwia łatwe wykorzystanie przez atakującego z niskimi uprawnieniami, który ma dostęp do sieci przez HTTPS, co może prowadzić do nieautoryzowanego tworzenia, usuwania lub modyfikacji danych krytycznych.

Podatność w Oracle REST Data Services (komponent: Core) dotyczy wersji 24.2.0-26.1.0. Jest to trudna do wykorzystania podatność, która pozwala atakującemu o niskich uprawnieniach z dostępem do sieci przez HTTPS na kompromitację Oracle REST Data Services, wymagając jednocześnie interakcji ze strony innej osoby.

A path traversal vulnerability in MPD before version 0.24.11 allows an unauthenticated attacker to read files and directories outside the configured music_directory. The flaw exists in the local storage plugin where the path is constructed without canonicalization, allowing '..' sequences.

A stack buffer overflow vulnerability in Music Player Daemon (MPD) before version 0.24.11 exists in the pcm_unpack_24be function in src/pcm/Pack.cxx. An unauthenticated attacker can trigger an off-by-one write by issuing two MPD commands referencing a malicious HTTP audio source, causing three attacker-controlled bytes to be written past a 1365-entry buffer.

The insecure default settings of Portainer CE grant regular (non-admin) users privileges that allow host filesystem access and host-level code execution. An authenticated non-administrative user with endpoint access can exploit these settings to read host files or obtain root equivalent access on the host.