CVE Vulnerability Catalog

Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page.

An observable discrepancy in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock. The flock has no timeout, so a later open of that table blocks for as long as the handle holding the stale lock lives.

DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element. When the memory it addresses passes the check, the attribute lookup dereferences a NULL or invalid pointer and the process dies on SIGSEGV.

Vulnerability in Oracle Order Management (Product Diagnostic Tools component) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a remote low-privileged attacker to gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle Order Management (Product Diagnostic Tools component) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a remote low-privileged attacker to gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle Product Hub (Internal Operations component) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a remote low-privileged attacker to gain unauthorized access to critical data or all accessible data.

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations), affecting versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Product Hub.

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations), affecting versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Product Hub.

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations), affecting versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Product Hub.

Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI), affecting versions 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Installed Base.

Vulnerability in Installed Base (HTML UI component) in Oracle E-Business Suite versions 12.2.3-12.2.15. An easily exploitable flaw allows an unauthenticated network attacker, with user interaction, to perform unauthorized updates, inserts or deletes and read a subset of data, potentially impacting other products.

Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Installed Base, requires human interaction and may significantly impact additional products (scope change).

Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material.

Vulnerability in the Internal Operations component of Oracle Purchasing in Oracle E-Business Suite versions 12.2.3-12.2.15. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete access to some data, requiring user interaction.

Vulnerability in the Internal Operations component of Oracle Purchasing in Oracle E-Business Suite versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete access to some data.

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests) affecting versions 12.2.3-12.2.15. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized read access to a subset of Oracle Concurrent Processing accessible data.

Vulnerability in the Production Scheduling product of Oracle E-Business Suite (component: Internal Operations), affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with infrastructure logon to partially compromise confidentiality, integrity and availability of data. CVSS 3.1 Base Score 4.5.

Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO). Supported versions affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Strategic Network Optimization, requires human interaction.

Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Global Order Promising, may significantly impact additional products (scope change).