Dolibarr Cross-Site Scripting Vulnerability (CNVD-2020-10498)

Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities. A...

GitLab Information Disclosure Vulnerability (CNVD-2020-10495)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An information disclosure vulnerability exists in GitLab versions 11.8 and later. The vulnerability...

CVE-2020-9016

Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header...

CVE-2020-8804

SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module...

CVE-2019-17273

E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker to cause a Denial of Service DoS in IPv6 environments...

Cisco Unity Connection Directory Traversal Vulnerability (CNVD-2020-04829)

Cisco Unity Connection UC is a set of voice messaging platforms from the American company Cisco Cisco. The platform can use voice commands to make calls or listen to messages hands-free. A directory traversal vulnerability exists in Cisco Unity Connection version 11.5SU7 and versions prior to...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-03246)

Oracle Solaris is a Unix-like operating system. An unspecified vulnerability exists in the SMB Server component of Oracle Solaris 11. An attacker could exploit this vulnerability to compromise integrity...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-07309)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Kernel component of Oracle Solaris 11. An attacker could exploit this vulnerability to cause a partial denial of service partial DOS of Oracle Solaris...

PT-2020-1389

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 9 through 11 Description A remote code execution issue exists due to incorrect handling of objects in memory by the scripting engine in Internet Explorer. This could allow an attacker to execute arbitrary code in the...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-03245)

Oracle Solaris is a Unix-like operating system. An unspecified vulnerability exists in the X Window System component of Oracle Solaris 10 and 11. An attacker could exploit this vulnerability to compromise confidentiality and integrity...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-07308)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Kernel component of Oracle Solaris 11. An attacker could exploit this vulnerability to cause a partial denial of service partial DOS of Oracle Solaris...

OpenJDK: Incorrect handling of unexpected CertificateVerify TLS handshake messages (JSSE, 8231780)

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this...

CVE-2020-3941

The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed. This vulnerability is not present in VMware Tools 11.x.y since the affected functionality is not present in VMware Tools 11...

CVE-2020-2656

Vulnerability in the Oracle Solaris product of Oracle Systems component: X Window System. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2020-2647

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2020-2605

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successfu...

CVE-2020-2578

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMB to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris,...

CVE-2020-2558

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMB to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris,...

CVE-2020-2565

Vulnerability in the Oracle Solaris product of Oracle Systems component: Consolidation Infrastructure. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracl...

Online TV Database SQL Injection Vulnerability

Online TV Database is a set of online TV program database. A SQL injection vulnerability exists in the 'ID' parameter in Online TV Database version 2011. The vulnerability stems from a database-based application that lacks validation of externally entered SQL statements. An attacker can exploit...