CVE-2020-14781

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JNDI. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

PT-2020-4524

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.21 and prior Description The issue is related to insufficient input validation in the MySQL Server component, specifically in the Optimizer subsystem. This can be exploited by a remote attacker to cause a denial of...

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

JAXP XMLSchemaValidator Data Access

The vulnerability of the XMLSchemaValidator class in the JAXP component of the WildFly software framework JBoss Application Server is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to remotely gain access to read, modify, add, or delete data usi...

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the MySQL Database Management System is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause downtime or service failures through the use of MySQL network protocols...

ImageIO Component Partial DoS

The vulnerability of the ImageIO component in Oracle Java SE software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause partial service interruptions through network protocols...

pwntools

This is an offensive tool for exploit development and CTF Capture The Flag framework. The tool is called pwntools and is used for exploit development and CTF challenges. It provides a set of tools and libraries for exploiting vulnerabilities and solving CTF challenges. The tool is written in Pyth...

Authorization Bypass

mariadb is vulnerable to authorization bypass. The vulnerability exists through high privileged attacker with network access via multiple protocols...

CVE-2020-14581

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocol...

PT-2020-3599

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.20 and prior Description The issue is related to insufficient input validation in the InnoDB component of the MySQL Server system, allowing a remote attacker to cause a hang or denial of service using MySQL network...

[SECURITY] Fedora 32 Update: remmina-1.4.7-1.fc32

Remmina is a remote desktop client written in GTK+, aiming to be useful for system administrators and travelers, who need to work with lots of remote computers in front of either large monitors or tiny net-books. Remmina supports multiple network protocols in an integrated and consistent user...

Scripting Component DoS

The vulnerability of the Scripting component in Java SE and Java SE Embedded programming platforms is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to cause service failures through various network protocols...

Core server component Full Control

The vulnerability of the Core server component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application through the IIOP and T3 network protocols...

Node.js HTTP Header Validation Full Control

The vulnerability of the Node.js software platform is related to insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability allows a malicious actor to gain full control over an application through various network protocols...

GraalVM Compiler DoS

The vulnerability of the GraalVM Compiler component in Oracle GraalVM Enterprise Edition is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to trigger service failures through various network protocols...

Serialization Component DoS

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to cause service failures through various network protocols...

Advanced Management Console Unauthorized Access

The vulnerability of the Advanced Management Console component of the Java SE software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through various network...

Oracle MySQL Cluster DoS

Vulnerability of the Cluster component: The general system management for Oracle databases and MySQL Cluster is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using various network protocols...

CVE-2020-2922

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...