A security advisory has been issued for Oracle E-Business Suite, flagging a vulnerability tied to improper privilege management. This type of flaw means the system’s access controls may not work as intended, creating a risk that unauthorized users could access or modify data and functions they are not permitted to use.
The advisory was published ...
Continue reading
A critical security vulnerability has been identified in the Apache Plugin component of Oracle HTTP Server, which is part of Oracle Fusion Middleware. The versions confirmed to be affected by this flaw are 12.2.1.4.0 and 14.1.2.0.0.This issue is easy to exploit, and does not require an attacker to have any login credentials or pre-existing access ...
Continue reading
A security flaw has been identified in FastNetMon Community Edition, affecting all versions up to 1.2.9, specifically in its Juniper router integration plugin. This is an OS command injection vulnerability, meaning unsanitized data passed to the plugin's logging script could be used to run unauthorized, potentially malicious commands on the server ...
Continue reading
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism stores pointers to PHP objects in a global map without incrementing their reference counts. When an apache:Map node contains duplicate keys, processing the second entry overwrites the first in ...
Continue reading
