Aggregator

Some 35% of global organizations report challenges monitoring use of non-approved AI tools

A vulnerability, which was classified as critical, has been found in Oracle Enterprise Manager Ops Center 12.4.0.0. Affected by this issue is some unknown functionality of the component Satellite Framework. The manipulation leads to denial of service. This vulnerability is handled as CVE-2020-1971. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Oracle API Gateway 11.1.2.4.0. Affected by this issue is some unknown functionality of the component Oracle API Gateway. The manipulation leads to denial of service. This vulnerability is handled as CVE-2020-1971. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Oracle Business Intelligence Enterprise Edition 5.5.0.0.0/12.2.1.3.0/12.2.1.4.0. This affects an unknown part of the component BI Platform Security. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2020-1971. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle JD Edwards EnterpriseOne Tools up to 9.2.5.2. It has been declared as critical. This vulnerability affects unknown code of the component OneWorld Tools Security. The manipulation leads to denial of service. This vulnerability was named CVE-2020-1971. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle JD Edwards World Security A9.4. It has been rated as critical. This issue affects some unknown processing of the component World Software Security. The manipulation leads to denial of service. The identification of this vulnerability is CVE-2020-1971. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Oracle Communications Session Border Controller Cz8.2/Cz8.3/Cz8.4. This vulnerability affects unknown code of the component Routing. The manipulation leads to denial of service. This vulnerability was named CVE-2020-1971. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in OpenSSL up to 1.0.2w/1.1.1h. It has been rated as problematic. Affected by this issue is the function GENERAL_NAME_cmp of the component x509 Certificate Handler. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2020-1971. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Fujitsu M10-1, M10-4, M10-4S, M12-1, M12-2, M12-2S Servers. It has been classified as critical. Affected is an unknown function of the component XCP Firmware. The manipulation leads to denial of service. This vulnerability is traded as CVE-2021-23840. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle MySQL Workbench up to 8.0.22. It has been rated as critical. Affected by this issue is some unknown functionality of the component MySQL Workbench. The manipulation leads to denial of service. This vulnerability is handled as CVE-2020-1971. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Russia-aligned APT group RomCom was behind attacks that leveraged CVE-2024-9680, a remote code execution flaw in Firefox, and CVE-2024-49039, an elevation of privilege vulnerability in Windows Task Scheduler, as zero-days earlier this year. “Chaining together two zero-day vulnerabilities armed RomCom with an exploit that requires no user interaction,” ESET researchers said. The campaign leveraging the zero-click exploit CVE-2024-9680 allowed the attackers to execute code in the restricted context of the browser and CVE-2024-49039 allowed it … More →

The post RomCom hackers chained Firefox and Windows zero-days to deliver backdoor appeared first on Help Net Security.

ESET Research details the analysis of a previously unknown vulnerability in Mozilla products exploited in the wild and another previously unknown Microsoft Windows vulnerability, combined in a zero-click exploit

入门到精通 成为IoT漏洞挖掘专家

预计到 2032 年将达到惊人的1548 亿美元，复合年增长率（ CAGR ）为23.6%。

看雪论坛作者ID：压强带师

Чем же закончилась битва индийского предпринимателя с мировыми СМИ?

A vulnerability classified as problematic was found in Apache NimBLE up to 1.7.0. Affected by this vulnerability is an unknown functionality of the component HCI Event Parser. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2024-51569. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.