Quynh Le

The issue is related to a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability elevated from HNAP Stack-Based Buffer Overflow. This vulnerability can be exploited by unauthenticated attackers to gain arbitrary remote code execution on the vulnerable router.

The issue exists due to insufficient input validation in the Scheduler component of Oracle BI Publisher, part of the Oracle Fusion Middleware platform. This allows a remote attacker to execute arbitrary code and impact the confidentiality, integrity, and availability of protected information. Successful attacks can result in the takeover of Oracle BI Publisher.

The issue is related to insufficient input validation in the E-Business Suite - XDO component of Oracle BI Publisher, part of the Oracle Fusion Middleware platform. This can be exploited by a remote attacker to execute arbitrary code and gain full control over the application via the HTTP protocol. The vulnerability can be easily exploited by a low-privileged attacker with network access.

The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Platform Security for Java, potentially resulting in a takeover. This can be achieved due to a vulnerability in the OPSS component of Oracle Fusion Middleware.

The issue exists due to insufficient input validation in the Web Services component of Oracle WebLogic Server, allowing a remote attacker to gain unauthorized access to the device via T3 and IIOP protocols. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data on the Oracle WebLogic Server.

The issue is related to the incorrect restriction of XML external entity references in the Diagnostic Assistant component of Oracle OSS Support Tools. This can allow a remote attacker to gain unauthorized access to sensitive information. Successful exploitation can result in unauthorized access to critical data or complete access to all accessible data.

The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP, T3 protocols to compromise the server. Successful attacks can result in the takeover of Oracle WebLogic Server.

The issue is related to insufficient access control in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP, T3 protocols to compromise the server. Successful attacks can result in the takeover of Oracle WebLogic Server.

The issue is related to insufficient access control in the WLS Web Services component of Oracle WebLogic Server, allowing a high-privileged attacker with network access via IIOP, T3 protocols to compromise the server. Successful attacks can result in the takeover of Oracle WebLogic Server.

The issue is related to the Core component of Oracle WebLogic Server and is caused by inadequate access control. It allows an unauthenticated attacker with network access via IIOP, T3 protocols to compromise the server. Successful attacks can result in the takeover of Oracle WebLogic Server. The vulnerability is easily exploitable and has been exploited in the wild. It is estimated that over 300 vulnerable servers could be exploited, leading to severe security threats.

A pivot root race condition in the Linux kernel's fs/namespace.c allows local users to cause a denial of service by corrupting a mountpoint reference counter, potentially leading to a system panic. This issue is related to synchronization errors when using shared resources.