Authorization

In Drobo 5N2 4.0.5, all optional applications lack any form of authentication/authorization validation. As a result, any user capable of accessing the device over the network may interact with and control these applications. This not only poses a severe risk to the availability of these...

CVE-2018-14705

CVE-2018-14705 affects Drobo 5N2 (v4.0.5). The issue is that all optional applications lack authentication/authorization validation, allowing any network-accessing user to interact with and control those applications. Impact is stated as severe risks to availability, confidentiality, and integrit...

The vulnerability of the pg_ctlcluster script in the postgresql-common package allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise the integrity of the data.

The vulnerability of the pgctlcluster script in the postgresql-common package relates to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

The vulnerability of the EventJobData::execute function in the MariaDB database management system allows a perpetrator to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Eventjobdata::execute function in the MariaDB database management system’s eventdataobjects.cc file is related to a lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service...

The vulnerabilities of the pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts from the postgresql-common package can be exploited by attackers to compromise the integrity of data in PostgreSQL database management systems.

The vulnerability of the pgctlcluster, pgcreatecluster, and pgupgradecluster scripts from the postgresql-common package is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

The vulnerability of the MyISAM component of the Oracle MySQL database management system allows attackers to compromise data integrity.

The vulnerability of the MyISAM component in the Oracle MySQL database management system is related to the lack of access control mechanisms. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of Firefox browsers, related to a network security service error called CertificateVerify, allows attackers to compromise data integrity.

The vulnerability of Firefox is related to a bug in the Network Security Service’s CertificateVerify function. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of Firefox browsers, related to insufficient validation of input data, allows attackers to gain access to confidential information, compromise its integrity, and cause service failures.

The vulnerability of Firefox browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the vManage web interface of Cisco SD-WAN’s programmatically defined network allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability in the vManage web interface of Cisco’s programmable network architecture involves a lack of protection for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

Unspecified Vulnerability in Oracle Hyperion Financial Close Management

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial settlement, report production and other functions. An unspecified vulnerability exists in Oracle Hyperion Financial Close Management. An attacker could exploit this...

The vulnerability of the Firefox browser, related to a encoding error of the Latin character “kra”, allows an attacker to compromise data integrity.

The vulnerability of Firefox browsers is related to a coding error in the Latin character “kra”, which can be used to replace the standard character “k” in the address bar. Exploiting this vulnerability allows an attacker to compromise data integrity...

The vulnerability of Firefox browser, related to incorrect application installation when pressing the ALT + a keys on the keyboard, allows the attacker to compromise data integrity.

The vulnerability of Firefox browsers is related to the incorrect installation of extensions when pressing the ALT + a keys on the keyboard. This allows extensions to be installed without user confirmation. Exploiting this vulnerability can enable an attacker to compromise data integrity remotely...

The vulnerability of the SAP Gateway development environment and the SAP UI5 software platform, which exists due to the lack of measures to neutralize special elements, allows attackers to compromise data integrity.

The vulnerability of the SAP Gateway and the SAP UI5 software platform exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to compromise data integrity from a remote location...

Unspecified Vulnerability in Oracle Fusion Middleware Reports Developer (CNVD-2020-17119)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. An unspecified vulnerability exists in Oracle Fusion Middleware Reports...

The vulnerability of the FTP file transfer protocol in Firefox browsers allows attackers to compromise data integrity.

The vulnerability of the FTP file transfer protocol in Firefox is related to an initialization error in the modal notification that can be triggered when the page is reloaded. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the Firefox browser’s WebRTC extension, which allows a perpetrator to compromise data integrity

The vulnerability of the Firefox browser’s WebRTC extension is related to a display-related error in the origin domain. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

The vulnerability of Firefox browser, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

The vulnerability of Firefox browser, related to an error in determining the user cursor position, which may be located over the address bar, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to an error in the determination of the user’s cursor position, which can be located above the address bar. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the webcal resource identifier in the Firefox browser, related to the lack of protective measures for the website structure, allows attackers to compromise data integrity.

The vulnerability of the webcal resource identifier in the Firefox browser is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

The vulnerability of Firefox browser, related to an error in displaying the domain name in the address bar, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to an error in the display of the domain name in the address bar. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...