PT-2020-2602

Name of the Vulnerable Software and Affected Versions Oracle Knowledge versions 8.6.0 through 8.6.3 Description The issue is related to insufficient input validation in the InQuira Search component of Oracle Knowledge, allowing a remote attacker to cause a denial of service via HTTP. Successful...

PT-2020-2640

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 and 11 Description The issue is related to insufficient input validation in the Common Desktop Environment component of Oracle Solaris. This can be exploited by an attacker to gain full control over the application...

PT-2020-2187

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the User Interface component of Oracle Advanced Outbound...

PT-2020-2182

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue exists due to insufficient input validation in the Attribute Admin Setup component of Oracle Partner Management. This allows a remote attacker to modify, add, or dele...

PT-2020-2189

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.5 through 12.2.9 Description The issue is related to insufficient input validation in the Attachments / File Upload component of Oracle Applications Framework, allowing an unauthenticated attacker with...

PT-2020-2638

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient input validation in the svcbundle component of Oracle Solaris. This can allow a remote attacker to gain unauthorized access to protected information. The vulnerability ...

PT-2020-2418

Name of the Vulnerable Software and Affected Versions Cisco UCS Director and Cisco UCS Director Express for Big Data affected versions not specified Description The issue is related to multiple vulnerabilities in the REST API, potentially allowing a remote attacker to bypass authentication or...

PT-2020-2191

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to insufficient input validation in the User Interface component of Oracle Advanced Outbound Telephony. This allows a low-privileged attacker with network...

PT-2020-2180

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient input validation in the Oracle Scripting product, allowing an unauthenticated attack...

The vulnerability of the Git version control system, related to insufficient validation of input data, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Git version control system lies in the improper updating of submodules. This occurs because the operation can execute commands found in the .gitmodules file of the malicious repository. Exploiting this vulnerability allows a remote attacker to access confidential data,...

The vulnerability of Firefox browser, related to insufficient validation of input data, allows attackers to compromise the integrity of data.

The vulnerability of Firefox is related to a security policy error. This error does not apply to the content of XSL stylesheets, provided that the XML file complies with security policies and contains an XSL stylesheet. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the Omnibox address bar in Google Chrome, related to insufficient validation of entered data, allows attackers to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome relates to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity by using a specially created domain name...

PT-2020-2217

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description The issue is related to insufficient input validation in Microsoft SharePoint Server and SharePoint...

PT-2020-6357

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2016, 2018 Description The issue is related to insufficient input validation, which could lead to an application-level denial-of-service dos if successfully exploited. This means that a remote attacker might be able to caus...

PT-2020-2598

Name of the Vulnerable Software and Affected Versions Java SE versions 7u251, 8u241, 11.0.6, and 14 Java SE Embedded version 8u241 Description The issue is related to insufficient input validation in the Libraries component of Oracle Java SE and Java SE Embedded. This could allow a remote attacke...

The vulnerability of the sqlite3Select function in the SQLite database management system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the sqlite3Select function in the SQLite database management system is related to a selection error that uses the DISTINCT operator. Exploiting this vulnerability can allow an attacker to cause a service failure...

Arbitrary Code Execution

vnc is vulnerable to arbitrary code execution. The vulnerability exists as an insufficient input validation flaw was discovered in the VNC client application, vncviewer. If an attacker could convince a victim to connect to a malicious VNC server, or when an attacker was able to connect to vncview...

Cisco Email Security Appliance URL Filtering Bypass (cisco-sa-20191120-esa-url-bypass)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by a vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software due to insufficient input validation of URLs. An unauthenticated, remote attacker can exploit this, by crafting the URL in a...

Cisco FTD Software Command Injection (cisco-sa-20191002-fxos-cmd-inject)

According to its self-reported version, Cisco Firepower Threat Defense FTD Software is affected by multiple vulnerabilities in the CLI due to insufficient input validation. An unauthenticated, local attacker can exploit this, by including crafted arguments to specific commands, in order to execut...

The vulnerability of the email module in the Python programming language allows a hacker to receive emails from addresses that should be blocked.

The vulnerability of the email module in the Python programming language interpreter exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to receive emails from addresses that should be blocked...