Vuldb Updates

A vulnerability, which was classified as critical, has been found in Genomedics MilleGP5 5.9.2. This issue affects some unknown processing of the component File Handler. The manipulation leads to incorrect permission assignment. The identification of this vulnerability is CVE-2023-25438. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in BackWPup 1.7.1 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file wp_xml_export.php. The manipulation of the argument wpabs leads to code injection. This vulnerability is known as CVE-2011-4342. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple Safari up to 11.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component WebKit. The manipulation leads to race condition. This vulnerability is handled as CVE-2018-4192. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Myrephp MYRE Real Estate Software 2012. This vulnerability affects unknown code. The manipulation of the argument userid leads to sql injection. This vulnerability was named CVE-2012-4258. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in F5 NGINX Open Source and NGINX Plus. This issue affects some unknown processing of the component ngx_http_mp4_module. The manipulation leads to buffer over-read. The identification of this vulnerability is CVE-2024-7347. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in Red Hat Enterprise Linux and OpenShift Container Platform. It has been rated as critical. This issue affects some unknown processing of the component cri-o. The manipulation leads to improper authorization. The identification of this vulnerability is CVE-2024-8676. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in ISC BIND up to 9.11.37/9.16.50/9.18.32/9.20.4/9.21.3. Affected by this issue is some unknown functionality of the component Additional Section Record Handler. The manipulation leads to resource consumption. This vulnerability is handled as CVE-2024-11187. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in ISC BIND up to 9.18.32/9.20.4/9.21.3. This affects an unknown part of the component DNS-over-HTTPS. The manipulation leads to resource consumption. This vulnerability is uniquely identified as CVE-2024-12705. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Intel System Studio. This vulnerability affects unknown code. The manipulation leads to uncontrolled search path. This vulnerability was named CVE-2021-33064. The attack needs to be approached locally. There is no exploit available.

A vulnerability was found in Intel NUC HDMI Firmware Update Tool up to 1.78.2.0.6 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2022-26024. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Communications Unified Inventory Management 7.4.1/7.4.2/7.5.0. It has been declared as very critical. This vulnerability affects unknown code of the component TMF APIs. The manipulation leads to code injection. This vulnerability was named CVE-2022-22965. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Communications Cloud Native Core Binding Support Function 22.1.3. It has been declared as very critical. This vulnerability affects unknown code of the component BSF. The manipulation leads to code injection. This vulnerability was named CVE-2022-22965. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0/14.1.1.0.0. It has been rated as very critical. Affected by this issue is some unknown functionality of the component Third Party Tools/Samples. The manipulation leads to code injection. This vulnerability is handled as CVE-2022-22965. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0/22.1.0 and classified as very critical. This vulnerability affects unknown code of the component OC SEPP. The manipulation leads to code injection. This vulnerability was named CVE-2022-22965. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Communications Cloud Native Core Unified Data Repository 1.15.0/22.1.0 and classified as very critical. This issue affects some unknown processing of the component UDR. The manipulation leads to code injection. The identification of this vulnerability is CVE-2022-22965. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as very critical, has been found in Oracle Communications Policy Management 12.6.0.0.0. This issue affects some unknown processing of the component CMP. The manipulation leads to code injection. The identification of this vulnerability is CVE-2022-22965. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle SD-WAN Edge 9.0/9.1. It has been declared as very critical. This vulnerability affects unknown code of the component Management. The manipulation leads to code injection. This vulnerability was named CVE-2022-22965. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0/8.1.2.0. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component Others. The manipulation leads to code injection. This vulnerability is known as CVE-2022-22965. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Financial Services Behavior Detection Platform 8.1.1.0/8.1.1.1/8.1.2.0. It has been rated as very critical. Affected by this issue is some unknown functionality of the component BD. The manipulation leads to code injection. This vulnerability is handled as CVE-2022-22965. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as very critical has been found in Oracle Financial Services Enterprise Case Management 8.1.1.0/8.1.1.1/8.1.2.0. This affects an unknown part of the component Installers. The manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2022-22965. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.