Unspecified Vulnerability in Oracle Outside In Technology (CNVD-2020-09665)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...

Unspecified Vulnerability in Oracle Coherence

Oracle Fusion Middleware, the digital business platform for enterprise and cloud computing, is a comprehensive family of middleware products that enable organizations to create and run agile, intelligent business applications and maximize IT efficiency by leveraging modern hardware and software...

Unspecified Vulnerability in Oracle Business Intelligence Enterprise Edition (CNVD-2020-09680)

Oracle Fusion Middleware Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. business Intelligence Enterprise Edition is one of the components for the...

SIEMENS SINEMA Server Incorrect Session Authentication Vulnerability

SINEMA Server is Siemens' network management software for Industrial Ethernet. A security vulnerability exists in SIEMENS SINEMA Server. An attacker could exploit this vulnerability to compromise the confidentiality, integrity, and availability of affected systems and underlying components...

The vulnerability in the Google Chrome browser’s WebRTC implementation allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the Google Chrome browser’s WebRTC implementation arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The multiple vulnerabilities of Check Point Security Gateway firewalls models series 80, 600, and 1000 involve deficiencies in access control. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The multiple vulnerabilities of Check Point Security Gateway Series 80, 600, and 1000 are related to deficiencies in access control for certain functions. Exploitation of these vulnerabilities could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protect...

Oracle Hospitality RES 3700 Unauthorized Access Vulnerability

Oracle Hospitality RES 3700 is a complete restaurant point-of-sale solution. A security vulnerability exists in Oracle Hospitality RES 3700 5.7. An attacker could exploit this vulnerability to gain unauthenticated access to the network over HTTP, thereby compromising the Oracle Hospitality RES 37...

The vulnerability in the implementation of the HTTP Live Streaming protocol in Firefox and Firefox ESR browsers, as well as in the Thunderbird email client for Android, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the implementation of the HTTP Live Streaming protocol for Firefox and Firefox ESR browsers, as well as the Thunderbird email client for Android, is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the...

PT-2019-4682

Name of the Vulnerable Software and Affected Versions Apache Commons Beanutils versions prior to 1.9.2 Description The issue is related to the BeanIntrospector class in Apache Commons Beanutils, which can lead to the restoration of untrusted data structures in memory. This can allow a remote...

Oracle Sun Systems Products Suite Solaris Component Denial of Service Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Zones subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11.4...

CVE-2019-10935

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier All versions, SIMATIC PCS 7 V8.1 All versions V8.1 with WinCC V7.3 Upd 19, SIMATIC PCS 7 V8.2 All versions V8.2 SP1 with WinCC V7.4 SP1 Upd 11, SIMATIC PCS 7 V9.0 All versions V9.0 SP2 with WinCC V7.4 SP1 Upd11, SIMATIC WinCC...

The vulnerability of the Alpine Linux Docker distribution, related to the use of a empty password for the pre-installed account, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Alpine Linux Docker distribution stems from the use of a empty password for the pre-installed root account. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2019-10924

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.3. The vulnerability could allow an attacker to execute arbitrary code if the attacker tricks a legitimate user to open a manipulated project. In order to exploit the vulnerability, a valid user must open a manipulated...

Sandbox Restrictions Bypass

openjdk is vulnerable to sandbox restrictions bypass. An unspecified vulnerability allows remote attackers to affect confidentiality, integrity and availability via unknown vectors related to Libraries...

Oracle Retail Applications Retail Convenience Store Back Office Access Control Error Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management , etc. Retail Convenience Store Back Office is one of the retail back office components. A securi...

freerdp: Out-of-bounds write in nsc_rle_decode() function

A flaw was found in freerdp in versions before 2.0.0-rc4. An out-of-bounds write of up to 4 bytes in the nscrledecode function results in a memory corruption. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Teclib GLPI Competitive Conditions Issue Vulnerability

Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A competitive conditions issue vulnerability exists in Teclib GLPI versions...

PT-2019-6134 · Bluez +2 · Bluez +2

Name of the Vulnerable Software and Affected Versions: BlueZ versions through 5.48 Description: A heap-based buffer overflow was discovered in the bluetoothd component of BlueZ. The issue is caused by the lack of size checks when appending data to the output buffer in the service attr req functio...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27290)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27273)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...