Ivanti Endpoint Manager Cross-Site Scripting Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager version 2020.1.1 and prior versions that originates in /LDMS/frmsplitfrm.aspx, /LDMS/licensecheck.aspx, /LDMS/frmsplitcollapse.aspx, /LDMS...

CVE-2020-24442

Adobe Connect 11.0 and earlier are affected by a reflected Cross‑Site Scripting (XSS) vulnerability (CVE-2020-24442). An attacker can lure a user to a crafted URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. Affected product/version: Adobe Connec...

XooNIps SQL Injection Vulnerability

XooNIps is a content management system for the field of neuroscience by the XooNIps team in Japan. A SQL injection vulnerability exists in XooNIps version 3.49 and earlier versions, which stems from a lack of validation of externally entered SQL statements in database-based applications. An...

CVE-2020-25170

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...

FruityWifi Remote Code Execution Vulnerability

FruityWiFi is an open source tool for auditing wireless networks. A remote code execution vulnerability exists in FruityWifi 2.4 and earlier versions. The vulnerability stems from improper escaping of shell metacharacters obtained from a POST request from the pageconfigadv.php page. An attacker c...

Foxit Studio Photo Information Disclosure Vulnerability (CNVD-2020-59785)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of NEF files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

Foxit Studio Photo Remote Code Execution Vulnerability (CNVD-2020-59780)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of EPS files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied dat...

Foxit Studio Photo Information Disclosure Vulnerability (CNVD-2020-59771)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of ARW files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

Foxit Studio Photo Remote Code Execution Vulnerability (CNVD-2020-59778)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of NEF files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied dat...

Foxit Studio Photo Information Disclosure Vulnerability (CNVD-2020-59776)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. An information disclosure vulnerability exists in the handling of CMP files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

Facebook Hermes Out-of-Bounds Read Vulnerability

Facebook Hermes is a small and lightweight JavaScript engine , optimized for running React Native on Android . Facebook Hermes 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 Previous versions of the JavaScript interpreter have an out-of-bounds read vulnerability. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59061)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: X Plugin component of Oracle MySQL Server 8.0.21 and earlier. An attacker can exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59060)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: DDL component of Oracle MySQL Server 5.6.49, 5.7.31, 8.0.21 and earlier versions. An attacker can...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59066)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: PS component of Oracle MySQL Server 5.7.31, 8.0.21 and earlier versions. An attacker can exploit...

WordPress Simple Download Monitor SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Simple Download Monito is used in one of the site download management plugin. A SQL injection vulnerability exists in Simple Download...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59070)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 5.6.49, 5.7.31, 8.0.21 and earlier versions. An attacke...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58236)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...