HTTP Request Smuggling

webrick is vulnerable to HTTP request smuggling. The vulnerability exists as the request parser allows invalid Transfer-Encoding header values of close and keep-alive to be parsed and interpreted incorrectly...

In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel prtd is assigned substream->runtime->private_data. Later prtd is freed. However prtd is not sanitized and set to NULL resulting in a dangling pointer. There are other functions that access the same memory (substream->runtime->private_data) with a NULL check such as msm_pcm_volume_ctl_put() which means this freed memory could be used.

...

CVE-2020-12280

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php...

Cross site request forgery (csrf)

iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php...

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application relates to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain access to the ability to modify, add, or delete data...

Denial Of Service (DoS)

FFmpeg is vulnerable to Denial Of Service DoS. The avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

mina-core: Retaining an open socket in close_notify SSL-TLS leading to Information disclosure.

A cryptographic protocol integrity flaw was discovered in Apache Mina. The closure of a TLS session would not always result in closure of the socket, allowing the conversation to continue in clear text. This could undermine the confidentiality of a connection and potentially disclose sensitive...

Unspecified Vulnerability in Oracle Hyperion Financial Close Management Close Manager Component

Oracle Hyperion Financial Close Management is designed to provide centralized, Web-based management of period-end close activities in an extended financial close cycle. An unspecified vulnerability exists in the Oracle Hyperion Financial Close Management Close Manager component. An attacker could...

Unspecified Vulnerability in Oracle Hyperion Financial Close Management (CNVD-2020-43724 )

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial settlement, report production and other functions. A security vulnerability exists in the Close Manager component of Hyperion Financial Close Management version...

CVE-2020-14546

Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...

CVE-2020-14546

Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...

CVE-2020-14541

Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...

CVE-2020-14541

Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...

Design/Logic Flaw

Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...

Design/Logic Flaw

Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...

CVE-2020-14541

The CVE-2020-14541 entry concerns Oracle Hyperion Financial Close Management (Close Manager) with affected version 11.1.2.4. The vulnerability is described as allowing a high-privilege attacker with network access via HTTP to manipulate data in Close Manager, with exploitation requiring user inte...

CVE-2020-14541

Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...

CVE-2020-14541

Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion component: Close Manager. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Close...

CVE-2020-14546

CVE-2020-14546 affects Oracle Hyperion Financial Close Management, Close Manager component, version 11.1.2.4. A high-privilege attacker with network access via HTTP can compromise data integrity; successful exploits require user interaction. Impact reported as unauthorized creation, deletion, or ...