CVE-2020-14485

OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries...

CVE-2020-14485

OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries...

CVE-2020-14485

OpenClinic GA CVE-2020-14485 affects OpenClinic GA versions 5.09.02 and 5.89.05b. The issue is an authentication bypass using an alternate path or channel that may allow a session with limited functionality and execution of admin functions such as SQL queries. ICS advisories indicate this vulnera...

CVE-2020-14485: Authentication Bypass Using an Alternate Path or Channel

OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries...

Microsoft Windows Mobile Device Management Diagnostics elevation of privilege vulnerability (CNVD-2020-52925)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Mobile Device Manageme...

OWOX, Inc.: Unrestricted File Upload in Chat Window

Summary: The application allows the attacker to upload dangerous file types that can be automatically processed within the product's environment. Steps To Reproduce: - Hit the browser and navigate to https://bi.owox.com and sign in. - Open The Chat window. - Upload any .rb or .php file . - Click ...

Microsoft SharePoint Scorecards Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of controls in the Microsoft.PerformancePoint.Scorecards.Client...

Unspecified Vulnerability in Google Chrome (CNVD-2020-43478)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A security vulnerability exists in versions prior to Google Chrome 84.0.4147.89, which stems from the program failing to adequately enforce policies and can be...

PT-2020-3372

Name of the Vulnerable Software and Affected Versions Oracle Security Service versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to the SSL API component of Oracle Security Service, which has inadequate access controls. This allows an unauthenticated attacker with networ...

PT-2020-3318

Name of the Vulnerable Software and Affected Versions Oracle Insurance Accounting Analyzer versions 8.0.6 through 8.0.9 Description The issue is related to insufficient access controls in the User Interface component of the Oracle Insurance Accounting Analyzer product. It allows a low-privileged...

PT-2020-3341

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.9 Description The issue is related to insufficient access controls in the Preferences component of Oracle CRM Technical Foundation, allowing a low-privileged attacker with network...

PT-2020-3385

Name of the Vulnerable Software and Affected Versions Oracle Coherence versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 Description The issue is related to insufficient access controls in the CacheStore component of Oracle Coherence, allowing a remote attacker to cause a denial of...

PT-2020-3320

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Liquidity Risk Management version 8.0.6 Description The issue is related to insufficient access controls in the User Interface component of the Oracle Financial Services Liquidity Risk Management product. This allows ...

PT-2020-3449

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to insufficient access controls in the Query component of Oracle PeopleSoft Enterprise PeopleTools. This can be exploited by a remote attacker to gai...

ECOM-3000 Authentication Bypass Brute Force

The vulnerability of the ECOM-3000 data collection and transmission web application is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security measures through brute-force attacks...

Huawei Data Communication: Read display vrrp

Get the current VRRP configuration of the VRP device. Note: This script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Huawei Data Communication: Read and parse display mpls rsvp-te interface

Get mpls rsvp-te interface configuration of the VRP device. Please set screen-length of user-interface to 0, otherwise not all configurations are returned. Note: This script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might b...

Huawei Data Communication: Read and parse current bgp configuration

Get the current bgp configuration of the VRP device. Please set screen-length of user-interface to 0, otherwise not all configurations are returned. Note: This script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be...

Huawei Data Communication: Read display ospf peer brief command

Get the current ospf peer brief configuration of the VRP device. Please set screen-length of user-interface to 0, otherwise not all configurations may returned. Note: This script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions...

CVE-2020-12412

By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain with the https:// scheme, a blocked port number such as '1', and without a lock icon while controlling the page contents. This vulnerability affects Firefox 70...