The vulnerability in the Cisco IOS XE operating system’s web interface, related to insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, or accessibility of protected information.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, or accessibility of protected information...

CVE-2020-12647

Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit invalid code sequences under rare circumstances related to syntax. The resulting code could, for example, trigger a system fault or adversely affect confidentiality, integrity, and availability...

Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8

Memory safety flaws were found in Mozilla Firefox and Thunderbird. Memory corruption that an attacker could leverage with enough effort, could allow arbitrary code to run. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8

Memory safety flaws were found in Mozilla Firefox and Thunderbird. Memory corruption that an attacker could leverage with enough effort, could allow arbitrary code to run. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

NETGEAR R7800 Command Injection Vulnerability (CNVD-2020-25354)

The NETGEAR R7800 is a router from NETGEAR. The NETGEAR R7800 suffers from a command injection vulnerability that can be exploited by an attacker to compromise confidentiality, integrity, and availability...

The vulnerability of Google Chrome browsers, related to memory usage after deallocation, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...

The vulnerability of Google Chrome, related to improper control of access to critical resources, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to improper control of access to a critical resource when processing external protocols. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to information and compromise its integrity and availability throug...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-29609)

Oracle Solaris is a UNIX operating system from Oracle. An unspecified vulnerability exists in Oracle Solaris. An attacker could exploit this vulnerability to compromise Solaris, affecting the availability, confidentiality, and integrity of data...

Eaton HMiSoft VU3 Buffer Overflow Vulnerability (CNVD-2020-27479)

Eaton HMiSoft VU3 is a set of HMI programming software from Eaton Corporation. A buffer overflow vulnerability exists in Eaton HMiSoft VU3. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an...

Privilege Escalation

java is vulnerable to privilege escalation. An unspecified vulnerability allows an attacker to affect confidentiality, integrity and availability of the system via unknown vectors...

The vulnerability of Siemens SINEMA Server software for network management and configuration allows a perpetrator to compromise the confidentiality, integrity, and accessibility of vulnerable systems and basic components.

The vulnerability of Siemens SINEMA Server network management and configuration software is related to incorrect privilege assignment. Exploiting this vulnerability can allow an attacker to remotely compromise the confidentiality, integrity, and accessibility of the vulnerable system and its...

Samsung Mobile Device Resource Management Error Vulnerability (CNVD-2020-30604)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices suffer from a resource management error vulnerability that can be exploited by attackers to compromise confidentiality, integrity, and...

PT-2020-5476 · Fasterxml +4 · Jackson-Databind +4

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x before 2.9.10.4 Description: The issue is related to the restoration of untrusted data in memory, potentially allowing a remote attacker to impact the confidentiality, integrity, and availability of...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-04034)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 5.2.36, 6.0.16, and 6.1.2. An attacker could exploit the vulnerability to compromise confidentiality, integrity, and...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-04044)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 5.2.36, 6.0.16, and 6.1.2. An attacker could exploit the vulnerability to compromise confidentiality, integrity, and...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-07311)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Common Desktop Environment component of Oracle Solaris 10. An attacker could exploit this vulnerability to compromise confidentiality, integrity, and availability...

CVE-2019-10940

A vulnerability has been identified in SINEMA Server All versions V14.0 SP2 Update 1. Incorrect session validation could allow an attacker with a valid session, with low privileges, to perform firmware updates and other administrative operations on connected devices. The security vulnerability...

CVE-2019-19278

The CVE-2019-19278 entry concerns Siemens SINAMICS PERFECT HARMONY GH180 drives (MLFB 6SR32/4/5 with option A30 for HMIs ≥12 in, and MLFB 6SR325 High Availability) where an unauthenticated attacker with physical access can restore the device to a state where protection mechanisms are disabled. Th...

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-09958)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Oracle Applications DBA component in Oracle Database Server 12.1.0.2, 12.2.0.1, 18c, and 19c...