The vulnerability of Google Chrome’s online payment mechanism, which allows a violator to compromise data integrity

The vulnerability of Google Chrome’s online payment mechanism is related to the lack of a standard permission mechanism. Exploiting this vulnerability allows a malicious actor to affect data integrity through a specially created HTML page...

Unspecified Vulnerability in Oracle Fusion Middleware WebLogic Server (CNVD-2020-43739 )

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

freerdp: Out-of-bounds write in interleaved.c

A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...

PT-2020-6375

Name of the Vulnerable Software and Affected Versions U.motion Servers and Touch Panels affected versions not specified Description A vulnerability exists in U.motion Servers and Touch Panels related to incorrect authorization, which could allow unauthorized access when a low-privileged user make...

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress website content management system is related to an XSS attack that allows JavaScript to be injected into the STYLE code. Exploiting this vulnerability could enable a malicious actor to compromise the integrity of the data...

DEBIAN-CVE-2020-2816

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability c...

Oracle Database Server Unauthorized Access Vulnerability

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

CVE-2019-4541

IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814...

CVE-2020-2582

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iStore...

Vulnerability of the print-rsvp.c:rsvp_obj_print() utility for capturing and analyzing network traffic with tcpdump: This utility allows a intruder to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-rsvp.c:rsvpobjprint utility for capturing and analyzing network traffic using tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to information and compromise...

PT-2019-5030

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 69.0.1 Description The issue arises when the pointer lock is enabled by a website through the requestPointerLock function without notifying the user. This could allow a malicious website to hijack the mouse pointer,...

PT-2018-3211

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67 Description The issue is related to the incorrect implementation of object trimming in V8, which can lead to object corruption. A remote attacker can potentially exploit this via a crafted HTML page...

Unspecified Vulnerability in Oracle MySQL Server Component (CNVD-2019-07351)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the InnoDB subcomponent of the MySQL Server...

CVE-2018-2988

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: Products. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

PT-2018-3366

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.60 and prior Oracle MySQL versions 5.6.40 and prior Oracle MySQL versions 5.7.22 and prior Description: The issue is related to a lack of access control mechanism in the MyISAM component of Oracle MySQL, allowing an...

JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successfu...

Oracle Siebel Remote Vulnerability (CNVD-2017-00909)

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions , which includes sales management , marketing management , customer service systems , call centers and other modules.Siebel UI Framework is one of the framework components based on the...

CVE-2016-7107

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors...

Unspecified Vulnerability in Oracle E-Business Suite CRM Wireless Component

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. An unspecified vulnerability in the Person Address Page subcomponent of the Oracle CRM Wireless component of Oracle E-Business Suite version 12.1.3 ca...

Vulnerabilities of the Gentoo Linux operating system, which allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the aa-sources package up to version 2.4.23-r2 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...