Everything Shell Bulletin has reported about Critical Vulnerability: 6 stories, newest first. Part of our Vulnerabilities coverage.
A critical flaw in Oracle Essbase allows attackers to take over systems without credentials. Small businesses must verify their version and restrict access immediately.
Unauthenticated remote attackers can seize full control of data in affected Oracle Java versions via a critical JSSE vulnerability.
A critical flaw in the My Calendar plugin allows attackers to hijack administrator accounts without credentials, granting full control over affected WordPress sites.
Unpatched Redash versions let users with query access read secrets or write files, risking full system compromise via DuckDB defaults.
A critical gap in TR7 ASP allows attackers to run system commands without logging in, affecting versions below 1.0.1554.2331 and 1.6.1554.2331.
A critical flaw in IBM’s access management software allows remote attackers to bypass login screens, requiring immediate vendor updates.