Aggregator

A vulnerability was found in Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0. It has been classified as critical. This affects an unknown part of the component Third Party Tools. The manipulation leads to allocation of resources. This vulnerability is uniquely identified as CVE-2019-17359. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Hospitality Guest Access 4.2. It has been declared as critical. This vulnerability affects unknown code of the component Base. The manipulation leads to allocation of resources. This vulnerability was named CVE-2019-17359. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Oracle Communications Diameter Signaling Router 8.0.0/8.1.0/8.2.0/8.2.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the component IDIH Visualization. The manipulation leads to risky cryptographic algorithm. This vulnerability is known as CVE-2018-1000180. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Oracle Financial Services Analytical Applications Infrastructure 8.0.6/8.0.7/8.0.8/8.0.9. This issue affects some unknown processing of the component Infrastructure. The manipulation leads to allocation of resources. The identification of this vulnerability is CVE-2019-17359. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Oracle Managed File Transfer 12.2.1.3.0/12.2.1.4.0. Affected by this vulnerability is an unknown functionality of the component MFT Runtime Server. The manipulation leads to allocation of resources. This vulnerability is known as CVE-2019-17359. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle SOA Suite 12.2.1.3.0/12.2.1.4.0 and classified as critical. This issue affects some unknown processing of the component Installation. The manipulation leads to allocation of resources. The identification of this vulnerability is CVE-2019-17359. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle WebCenter Portal 11.1.1.9.0/12.2.1.3.0/12.2.1.4.0. It has been classified as critical. Affected is an unknown function of the component Security Framework. The manipulation leads to allocation of resources. This vulnerability is traded as CVE-2019-17359. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Oracle PeopleSoft Enterprise PeopleTools 8.56/8.57/8.58. Affected is an unknown function of the component Security. The manipulation leads to allocation of resources. This vulnerability is traded as CVE-2019-17359. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Enterprise Repository 11.1.1.7.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Security Subsystem. The manipulation leads to information disclosure. This vulnerability is known as CVE-2018-1000180. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

The ASUS DriverHub driver management utility was vulnerable to a critical remote code execution flaw that allowed malicious sites to execute commands on devices with the software installed. [...]

emlog是一套基于PHP和MySQL的CMS建站系统。 emlog v2.5.3版本存在文件上传漏洞，该漏洞源于admin/plugin.php插件组件对上传的文件缺少有效的验证。攻击者可利用该漏洞上传恶意文件从而远程执行任意代码。

WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress插件WP Umbrella: Update Backup Restore & Monitoring存在本地文件包含漏洞，攻击者可利用该漏洞在服务器上包含和执行任意文件，从而允许执行这些文件中的任何PHP代码。目前，供应商

Is Securing Non-Human Identities (NHIs) a Cybersecurity Game-Changer? Understanding the pivotal role NHIs play in your cybersecurity framework is crucial, as these machine identities has the potential to transform how we perceive and manage cyber risks. The Intricacies of NHIs in Modern Cybersecurity Cybersecurity is no different from any other field – it’s dynamic and […]

The post How NHIs Deliver Value to Your Cybersecurity Framework appeared first on Entro.

The post How NHIs Deliver Value to Your Cybersecurity Framework appeared first on Security Boulevard.

How Critical is the Role of Non-Human Identities in Keeping Secrets Safe in a Cloud Environment? The cornerstone of an effective cybersecurity strategy is ensuring that Non-Human Identities (NHIs) and their secrets are secure. But why are NHIs and secrets management so critical, specifically? NHIs are machine identities that play a pivotal role in cybersecurity. […]

The post Keeping Secrets Safe in a Dynamic Cloud Environment appeared first on Entro.

The post Keeping Secrets Safe in a Dynamic Cloud Environment appeared first on Security Boulevard.

Are Your Cyber Security Measures Really Impenetrable? When it comes to cybersecurity, there’s almost nothing as vital as maintaining an impenetrable defense. This is particularly true within cloud computing, where Non-Human Identities (NHIs) and their secrets play a crucial role. But just how impenetrable is your security? And how much importance do you place on […]

The post Building an Impenetrable Defense with NHIs appeared first on Entro.

The post Building an Impenetrable Defense with NHIs appeared first on Security Boulevard.

A vulnerability, which was classified as problematic, has been found in nbdkit Server. Affected by this issue is some unknown functionality. The manipulation leads to off-by-one. This vulnerability is handled as CVE-2025-47711. The attack needs to be approached within the local network. There is no exploit available.

A vulnerability classified as critical was found in Apache Superset up to 4.1.1. Affected by this vulnerability is an unknown functionality of the component Dashboard. The manipulation leads to improper authorization. This vulnerability is known as CVE-2025-27696. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Frontend Dashboard Plugin up to 1.0/2.2.7 on WordPress. Affected is the function fed_admin_setting_form_function. The manipulation leads to missing authorization. This vulnerability is traded as CVE-2025-4474. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Frontend Dashboard Plugin up to 1.0/1.5.10/2.2.7 on WordPress. It has been rated as critical. This issue affects the function ajax_request. The manipulation leads to missing authorization. The identification of this vulnerability is CVE-2025-4473. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Newsletters Plugin up to 4.9.9.8 on WordPress. It has been declared as critical. This vulnerability affects unknown code. The manipulation of the argument orderby leads to sql injection. This vulnerability was named CVE-2025-3107. The attack can be initiated remotely. There is no exploit available.