Aggregator

A CVSS score 6.8 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by '@ByteInsight' was reported to the affected vendor on: 2025-01-30, 35 days ago. The vendor is given until 2025-05-30 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.3 AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L severity vulnerability discovered by 'Mikhail Evdokimov (@konatabrk) from PCAutomotive' was reported to the affected vendor on: 2025-01-30, 35 days ago. The vendor is given until 2025-05-30 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 6.3 AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L severity vulnerability discovered by 'Mikhail Evdokimov (@konatabrk) from PCAutomotive' was reported to the affected vendor on: 2025-01-30, 35 days ago. The vendor is given until 2025-05-30 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.5 AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mikhail Evdokimov (@konatabrk) from PCAutomotive' was reported to the affected vendor on: 2025-01-30, 35 days ago. The vendor is given until 2025-05-30 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

ISC（Internet Systems Consortium）が提供するISC BINDには、複数の脆弱性が存在します。

A vulnerability, which was classified as problematic, has been found in F5 NGINX Open Source and NGINX Plus. This issue affects some unknown processing of the component ngx_http_mp4_module. The manipulation leads to buffer over-read. The identification of this vulnerability is CVE-2024-7347. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in Red Hat Enterprise Linux and OpenShift Container Platform. It has been rated as critical. This issue affects some unknown processing of the component cri-o. The manipulation leads to improper authorization. The identification of this vulnerability is CVE-2024-8676. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in buc Traceroute up to 2.1.2. It has been classified as problematic. This affects an unknown part of the component Command Line Handler. The manipulation leads to Local Privilege Escalation. This vulnerability is uniquely identified as CVE-2023-46316. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in ISC BIND up to 9.11.37/9.16.50/9.18.32/9.20.4/9.21.3. Affected by this issue is some unknown functionality of the component Additional Section Record Handler. The manipulation leads to resource consumption. This vulnerability is handled as CVE-2024-11187. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in ISC BIND up to 9.18.32/9.20.4/9.21.3. This affects an unknown part of the component DNS-over-HTTPS. The manipulation leads to resource consumption. This vulnerability is uniquely identified as CVE-2024-12705. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Intel System Studio. This vulnerability affects unknown code. The manipulation leads to uncontrolled search path. This vulnerability was named CVE-2021-33064. The attack needs to be approached locally. There is no exploit available.

A vulnerability was found in Intel NUC HDMI Firmware Update Tool up to 1.78.2.0.6 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2022-26024. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in WSO2 API Manager, Identity Server, Identity Server Analytics, Identity Server as Key Manager and Enterprise Integrator and classified as very critical. Affected by this vulnerability is an unknown functionality of the component File Upload Handler. The manipulation leads to unrestricted upload. This vulnerability is known as CVE-2022-29464. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Oracle Retail Bulk Data Integration 16.0.3 and classified as very critical. This issue affects some unknown processing of the component BDI Job Scheduler. The manipulation leads to code injection. The identification of this vulnerability is CVE-2022-22965. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Retail Customer Management and Segmentation Foundation 17.0/18.0/19.0. It has been classified as very critical. Affected is an unknown function of the component Security. The manipulation leads to code injection. This vulnerability is traded as CVE-2022-22965. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Retail Financial Integration 14.1.3.2/15.0.3.1/16.0.3/19.0.1. It has been rated as very critical. Affected by this issue is some unknown functionality of the component PeopleSoft Integration Bugs. The manipulation leads to code injection. This vulnerability is handled as CVE-2022-22965. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as very critical has been found in Oracle Retail Integration Bus 14.1.3.2/15.0.3.1/16.0.3/19.0.1. This affects an unknown part of the component RIB Kernal. The manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2022-22965. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as very critical was found in Oracle Retail Merchandising System 16.0.3/19.0.1. This vulnerability affects unknown code of the component Foundation. The manipulation leads to code injection. This vulnerability was named CVE-2022-22965. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Commerce Guided Search 11.3.2. It has been classified as very critical. This affects an unknown part of the component Content Acquisition System. The manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2022-22965. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.