30 matches found
CVE-2020-11973
A flaw was found in camel. Apache Camel RabbitMQ enables java deserialization, by default, without any means of disabling which can lead to arbitrary code being executed. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation...
CVE-2020-11111
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following conditions a...
CVE-2020-7941
A privilege escalation flaw was found in plone in versions 4.3 through 5.2.1. Users are allowed to PUT overwrite some content without needing write permissions. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2019-19921
A flaw was found in runc. An attacker who controls the container image for two containers that share a volume can race volume mounts during container initialization, by adding a symlink to the rootfs that points to a directory on the volume. The highest threat from this vulnerability is to data...
Shandong Nongyou Agricultural Integrity System SQL Injection Vulnerability
Shandong Nongyou Agricultural Integrity System is an agricultural management system. The Agricultural Integrity System suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2014-2420
CVE-2014-2420 is an unspecified vulnerability in Oracle Java SE deployments (6u71, 7u51, 8; Java SE Embedded 7u51) that affects the Deployment component and can impact integrity. The NVD entry provides a low base score (CVSSv2 2.6, I:P). IBM’s CP4S bulletin confirms affected IBM Java versions and...
