CVE-2020-13186

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link...

Cross site request forgery (csrf)

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link...

PT-2021-9566

Name of the Vulnerable Software and Affected Versions Teradici Cloud Access Connector versions prior to v31 Description A missing Anti CSRF mechanism was discovered in a specific web form of the Teradici Cloud Access Connector, allowing an attacker with knowledge of both a machineID and user GUID...

Sun ZFS Storage Appliance Kit Unauthorized Access

The vulnerability of the RAS subsystem components of the Sun ZFS Storage Appliance Kit is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or gain unauthorized access to protected information...

Teradici Cloud Access Connector Cross-Site Request Forgery Vulnerability

A cross-site request forgery vulnerability exists in Teradici Cloud Access Connector v31 and earlier, which can be exploited by an attacker to modify data when a user clicks a malicious link...

CVE-2020-13186: Cross-Site Request Forgery (CSRF)

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link...

Unified Audit Oracle Database Server Data Access Privilege Escalation

The vulnerability of the Unified Audit component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized access to protected...

WebLogic Server Data Access

The vulnerability of the components of Oracle WebLogic Server’s application services is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol over the network...

Marketing Administration Component Unauthorized Access

The vulnerability of Oracle Marketing’s Marketing Administration component exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to modify data or gain unauthorized access to the device through HTTP requests...

Analytics Web General component Unauthorized Access

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to remotely modify data or gain unauthorized access to the device...

Oracle Hospitality Reporting and Analytics Report Data Modification Privilege Escalation

The vulnerability of the Report component of the Oracle Hospitality Reporting and Analytics application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to obtain unauthorized access to protected...

USN-4713-2 linux, linux-gke-5.0, linux-gke-5.3, linux-hwe, linux-raspi2-5.3 vulnerability

It was discovered that the LIO SCSI target implementation in the Linux kernel performed insufficient identifier checking in certain XCOPY requests. An attacker with access to at least one LUN in a multiple backstore environment could use this to expose sensitive information or modify data...

Oracle Database Server Java VM Privilege Escalation

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to modify, add, or delete data, or to obtain unauthorized access to protect...

Oracle E-Business Suite API Data Modification

The vulnerability of the APIs of the Oracle Installed Base information storage center component in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to modify, add, or...

MySQL Server Optimizer Data Modification DoS

The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data, or cause service interruptions using the MySQL protocol...

GNU Binutils Post-Installation Vulnerability

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide linkers, assemblers, and other tools for target files and archives. An...

Oracle Business Intelligence Enterprise Edition Component Data Access Privilege Escalation

The vulnerability of the Analytics Web Dashboard component of the Oracle Business Intelligence Enterprise Edition software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data, or to obtain...

Oracle Configurator UI Servlet Unauthorized Access

The vulnerability of the UI Servlet component of the Oracle Configurator exists due to insufficient validation of input data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information or to modify, add, or delete data using...

USN-4713-1 linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerability

It was discovered that the LIO SCSI target implementation in the Linux kernel performed insufficient identifier checking in certain XCOPY requests. An attacker with access to at least one LUN in a multiple backstore environment could use this to expose sensitive information or modify data...

Oracle BI Publisher Security Component Privilege Escalation

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or cause service failures using the HTTP protocol...