Enterprise Config Management Unauthorized Access

The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...

APM Mesh Enterprise Manager Data Modification DoS

The vulnerability of the APM Mesh component of the Enterprise Manager for Fusion Middleware lies in its lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data, obtain unauthorized access to protected information...

Global EM Framework Component Privilege Escalation

The vulnerability of the Global EM Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected information...

Linux: /etc/login.defs LOG_UNKFAIL_ENAB

The /etc/login.defs file defines the site-specific configuration for the shadow password suite. This file is required. Absence of this file will not prevent system operation, but will probably result in undesirable operation. LOGUNKFAILENAB boolean enables display of unknown usernames when login...

Solaris Filesystem DoS

The vulnerability of the Filesystem component in the Solaris operating system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Enterprise Manager Base Platform Job System Unauthorized Access

The vulnerability of the Enterprise Manager Base Platform Job System component of the Oracle Enterprise Manager software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or...

Enterprise Manager for Oracle Unauthorized Access

The vulnerability of the Enterprise Manager for Oracle Database Target Management software component of the Oracle Enterprise Manager is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information or...

Cisco IOS XR BGP DoS

The vulnerability of the Border Gateway Protocol BGP implementation in Ethernet VPN technology of the Cisco IOS XR operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created Multicast Leav...

Linux Kernel DoS

The vulnerability of Linux operating system kernels is related to insufficient validation of input data and incorrect implementation of functions. Exploiting this vulnerability can allow an attacker, working remotely, to cause service failures by sending location updates via the IAPP protocol,...

ImageMagick XML_PARSE_HUGE DoS

The vulnerability of the XMLPARSEHUGE configuration in the console-based ImageMagick graphics editor is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to cause service failures remotely...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Fedora 31 : glibc (2020-1a3bdfde17)

This update fixes a minor security vulnerability LDPREFERMAP32BITEXEC not ignored in setuid binaries and addresses are long-standing bug where missing shared objects could cause crashes due to incorrectly handled dlopen failures RHBZ1395758. The latter fix also causes lazy binding failures in ELF...

Moxa EDS-G508E EDS-G512E EDS-G516E DoS

The vulnerability of the microprogrammed software in Moxa EDS-G508E, EDS-G512E, and EDS-G516E switches is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Intel BMC Insufficient Validation DoS

The vulnerability of microprogrammed software in the Intel Baseboard Management Controller BMC relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Intel Xeon DoS

The vulnerability of Intel Xeon processor microprogramming software is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures...

PDFium PDF Content Handler DoS

The vulnerability of the PDFium browser for processing PDF content in Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability allows an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures through...

Huawei mobile phone software DoS

The vulnerability of Huawei’s mobile phone software exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

NVIDIA Games App Code Execution

The vulnerability of the NVIDIA Games App software on the NVIDIA Shield TV Experience device is related to lack of access control. Exploiting this vulnerability could allow a hacker to cause service failures or execute arbitrary codes...

Huawei mobile phone software DoS

The vulnerability of Huawei’s mobile phone software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures through specially created TD-SCDMA messages...

SAP Kernel DoS

The vulnerability of the SAP Kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...