CVE-2020-5643

Consolidated details for CVE-2020-5643 show a vulnerability in Cybozu Garoon (Cybozu Garoon 5.0.0–5.0.2) due to improper input validation (CWE-20). An authenticated user can remotely delete bulletin board data via an unspecified vector. The root cause centers on input validation weaknesses that p...

Cybozu Garoon vulnerable to improper input validation

Overview Cybozu Garoon provided by Cybozu, Inc. contains an improper input validation vulnerability CWE-20. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under the Information Security Early Warning...

Cybozu Garoon incorrect input validation vulnerability

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. Cybozu Garoon has a security vulnerability. An attacker can use the vulnerability to log in to the product users can delete some data on the bulletin board...

Why Paying to Delete Stolen Data is Bonkers

Companies hit by ransomware often face a dual threat: Even if they avoid paying the ransom and can restore things from scratch, about half the time the attackers also threaten to release sensitive stolen data unless the victim pays for a promise to have the data deleted. Leaving aside the notion...

CVE-2019-8732

The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device...

CVE-2019-8732

The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device...

CVE-2019-8575

The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A base station factory reset may not delete all user information...

CVE-2019-8575

The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A base station factory reset may not delete all user information...

Arbitrary file deletion

The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A base station factory reset may not delete all user information...

Arbitrary file deletion

The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device...

CVE-2019-8732

CVE-2019-8732 affects iOS and was remedied in iOS 13. The issue caused deleted calls to remain visible on the device due to data handling during deletion, and Apple implemented an improved data deletion mechanism in iOS 13 to address it. Public references across multiple feeds (NVD/NVD listing, R...

CVE-2019-8732

The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device...

CVE-2019-8575

The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A base station factory reset may not delete all user information...

CVE-2019-8575

CVE-2019-8575 affects Apple AirPort Base Station firmware (AirPort Extreme and AirPort Time Capsule). The issue is a data deletion weakness where a factory reset may not delete all user information. Apple’s security updates 7.8.1 and 7.9.1 address this by improving data deletion. Impact is a pote...

Unspecified Vulnerability in Oracle Java SE and Oracle Java SE Embedded (CNVD-2020-61055)

Java SE is short for Java Platform Standard Edition, which is used to develop and deploy Java applications on desktops, servers, and embedded devices and real-time environments. Java SE Embedded is based on Java SE and provides specific features and support for embedded systems. An unspecified...

Oracle WebLogic Server Access Control Issue Vulnerability

Oracle WebLogic Server is an Oracle Oracle application service middleware for cloud and traditional environments, which provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application...

The vulnerability of the InnoDB component of the MySQL Database Server allows a attacker to create, delete, or modify access to critical data, or all data accessible to the MySQL Server, or cause service interruptions.

The vulnerability of the InnoDB component of the MySQL Database Management System is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to create, delete, or modify access to critical data or all data accessible to the MySQL Server. It can also cause...

The vulnerability of the Application Express component of the Oracle Database Server system allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Application Express component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, add, or delete access to data...

webkitgtk: Browsing history could not be deleted

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable to delete browsing history items...

CVE-2019-8768

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable to delete browsing history items...