Introduction to SQL: Examples, Best Practices and Pitfalls

SQL Structured Query Language has been with us for more than half a century and it’s not going away anytime soon. Popular in both traditional relational databases and newer NoSQL databases technologies, SQL is widely used for data analytics, Big Data processing, coding languages, and more. I’m a...

OSV-2020-1502 Use-of-uninitialized-value in void add_residual_fallback<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22810 Crash type: Use-of-uninitialized-value Crash state: void addresidualfallback void accelerationfunctions::addresidual void scalecoefficientsinternal...

PT-2020-4970 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.7.11 Description: A race condition exists between certain expand functions expand downwards and expand upwards and page-table free operations from an munmap call. This issue can be exploited to cause a denial ...

PT-2020-21738

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the functions impeg2 fmt conv yuv420p to yuv420sp uv, impeg2d format convert, an...

PT-2020-21810

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ, with details provided in a crash state. The crash state includes information about std:: 1:: MetaBase...

CVE-2020-14485

OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries...

CVE-2020-14485

OpenClinic GA versions 5.09.02 and 5.89.05b may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries...

PT-2020-14033

Name of the Vulnerable Software and Affected Versions OpenClinic GA versions 5.09.02 through 5.89.05b Description The issue may allow an attacker to bypass client-side access controls or use a crafted request to initiate a session with limited functionality. This could potentially allow execution...

PT-2020-3527

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.30 and prior MySQL Server versions 8.0.20 and prior Description The vulnerability is related to insufficient input validation in the MySQL Server component, specifically in the User-Defined Functions UDF system. This...

PT-2020-5955

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS JAVA LM Configuration Wizard versions 7.30 through 7.50 Description: The vulnerability is related to missing authentication for critical functions in the SAP NetWeaver Java Application Server. This issue allows an attacker to...

BSA Radar 1.6.7234.24750 - Cross-Site Request Forgery (Change Password)

Exploit title: BSA Radar 1.6.7234.24750 - Cross-Site Request Forgery Change Password Exploit Author: William Summerhill Date: 2020-06-22 Vendor Homepage:bhttps://www.globalradar.com/ Version: BSA Radar - Version 1.6.7234.24750 and lower CVE: CVE-2020-14944 Description: The Global RADAR BSA Radar...

CVE-2020-5597

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains a null pointer dereference vulnerability, which may allow a remote attacker to stop the network functions of the products ...

CVE-2020-5600

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains a resource management error vulnerability, which may allow a remote attacker to stop the network functions of the products...

CVE-2020-5595

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains a buffer overflow vulnerability, which may allow a remote attacker to stop the network functions of the products or execut...

CVE-2020-5598

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains an improper access control vulnerability, which may which may allow a remote attacker tobypass access restriction and stop...

CVE-2020-5599

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains an improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability, which may allow a remot...

CVE-2020-5600

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains a resource management error vulnerability, which may allow a remote attacker to stop the network functions of the products...

CVE-2020-5596

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model does not properly manage sessions, which may allow a remote attacker to stop the network functions of the products or execute a...

Improper access control

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains an improper access control vulnerability, which may which may allow a remote attacker tobypass access restriction and stop...

Design/Logic Flaw

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains an improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability, which may allow a remot...