CVE-2020-14708

CVE-2020-14708 is a vulnerability in Oracle’s Customer Management and Segmentation Foundation (Segment component). Affected are Oracle Retail Applications versions 16.0, 17.0 and 18.0. An attacker with network access via HTTP and with low privileges can exploit this to perform unauthorized update...

CVE-2020-14682

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Estimate and Actual Charges. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Depot...

CVE-2020-14667

CVE-2020-14667 affects Oracle E-Business Suite, Oracle CRM Technical Foundation (component: Preferences). Affected versions: 12.1.3 and 12.2.3–12.2.9. The vulnerability is exploitable from the network via HTTP by a low-privilege user, with user interaction required, and may allow unauthorized acc...

CVE-2020-14684

CVE-2020-14684 affects Oracle Financial Services Analytical Applications Infrastructure (Infrastructure component) in Oracle Financial Services Applications. Affected versions are 8.0.6–8.1.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the infr...

CVE-2020-14652

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14661

CVE-2020-14661 affects Oracle E-Business Suite – Oracle CRM Technical Foundation (component: Preferences). Affected versions are 12.1.3 and 12.2.3–12.2.9. The vulnerability allows unauthenticated attackers to access the system over HTTP, with user interaction required, and can lead to unauthorize...

CVE-2020-14658

CVE-2020-14658 affects the Oracle E-Business Suite Marketing Administration component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. An unauthenticated, network-accessible attacker via HTTP can compromise Oracle Marketing, potentially causing unauthorized creation, deletion or modificati...

CVE-2020-14610

The CVE-2020-14610 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Applications Framework (OA Framework), specifically in the Attachments / File Upload component. Affected product/version is Oracle E-Business Suite OA Framework with version 12.2.9. The flaw is exploitable over...

CVE-2020-14613

CVE-2020-14613 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in the Advanced User Interface component. Affected are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Sites; exploitation requires user i...

CVE-2020-14607

CVE-2020-14607 affects Oracle Fusion Middleware MapViewer Tile Server (versions 12.2.1.3.0 and 12.2.1.4.0). The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise MapViewer; exploitation is described as easily exploitable and may lead to unauthorized read...

CVE-2020-14607

Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware component: Tile Server. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-14528

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

PT-2020-3443 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.20 and prior Description: The issue is related to insufficient access control in the Server: DML component of Oracle MySQL Server, allowing a remote attacker to cause a denial of service using the MySQL...

SpryMedia DataTables SQL Injection Vulnerability (CNVD-2021-17760)

SpryMedia DataTables is a British SpryMedia company for the conversion of HTML tables into dynamic tables of JavaScript library . A SQL injection vulnerability exists in the 'search' parameter of the Records.php file in SpryMedia DataTables. A remote attacker can exploit this vulnerability to add...

SpryMedia DataTables SQL Injection Vulnerability (CNVD-2021-17761)

SpryMedia DataTables is a British SpryMedia company for the conversion of HTML tables into dynamic tables of JavaScript library . A SQL injection vulnerability exists in the 'order' and 'column' parameters of the Records.php file in SpryMedia DataTables. A remote attacker can exploit this...

rauLink Software Domotica Web 2.0 SQL Injection Authentication Bypass

Summary Smart home automation software. Description The application suffers from an SQL Injection vulnerability. Input passed through 'usuario' POST parameter in registraUsuario is not properly sanitised before being returned to the user or used in SQL queries. This can be exploited to manipulate...

Microsoft Windows Kernel Elevation of Privilege (CVE-2020-0986)

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs, view, change, or delete data, or create ne...

Windows Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations. To exploit the vulnerability, an attacker would require unprivileged execution on the victim system. After successfully exploiting the vulnerability, an...

Vulnerability of the Server component: DML of the MySQL database management system client, which allows attackers to cause service interruptions.

The vulnerability of the Server component: The DML of the MySQL database management system’s client is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

A brief history of video game saves and data modification

Games consoles and handhelds have always been an interesting battleground for hacking activities. The homebrew scene for using hardware in interesting ways has a long and varied history, especially where porting games to run on different platforms is concerned. Tampering with games while playing...