4022 matches found
UBUNTU-CVE-2020-11058
In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdpreadfontcapabilityset could lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect due to an invalid data read. This has been fixed in 2.0.0...
CVE-2020-6241
SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevate privileges of users in the system, leading to SQL Injection...
HCL Technologies Connections Open Redirect Vulnerability
HCL Technologies Connections is a suite of enterprise collaboration platforms from HCL Technologies India. An open redirection vulnerability exists in HCL Technologies Connections versions 5.5, 6.0 and 6.5, which arises from a network system or product that does not properly validate incoming dat...
Google Android Framework elevation of privilege vulnerability (CNVD-2020-27136)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. A security vulnerability exists in Framework in Android versions 8.0, 8.1 and 9. An attacker can exploit the vulnerability to elevate...
Adobe Bridge Code Execution Vulnerability (CNVD-2020-32370)
Adobe Bridge is a file viewer from the American company Audobee Adobe. A security vulnerability exists in Adobe Bridge 10.0.1 and earlier versions for Windows-based platforms. An attacker can exploit the vulnerability to execute arbitrary code...
unzip: overlapping of files in ZIP container leads to denial of service
Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service resource consumption, aka a "better zip bomb" issue...
UBUNTU-CVE-2020-1774
When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects OTRS Community Edition: 5.0.42 and prior versions, 6.0.27 and prio...
Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2020-26661)
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A cross-site scripting vulnerability exists in Cybozu Garoon versions 4.0.0 through 4.10.3. A remote attacker can...
Unspecified Vulnerability in ABB System 800xA Information Manager
ABB System 800xA Information Manager is an information management system from ABB Switzerland. The system supports access to real-time and historical information for all applications in the automation system, among other things. A security vulnerability exists in ABB System 800xA Information...
HCL Technologies Connections Information Disclosure Vulnerability
HCL Technologies Connections is a suite of enterprise collaboration platforms from HCL Technologies India. A security vulnerability exists in HCL Technologies Connections version 6.5, 6.0 and 5.5. The vulnerability can be exploited by an attacker to gain access to sensitive information...
D-Link DSL-2640B B2 Trust Management Issue Vulnerability
The D-Link DSL-2640B B2 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DSL-2640B B2 EU4.01B version, which comes with hard-coded accounts in the router. The vulnerability can be exploited by an attacker to log in to the management interface,...
Oracle Access Control Error Vulnerability
Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management. A security vulnerability exists in the Security component of Retail Store Inventory Management...
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2020-23467)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server 8.0.18 and prior versions of Server: Security: Privileges component of Oracle MySQL. An attacker...
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2020-23453)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Connection Handling component of MySQL Server 8.0.19 and earlier versions in Oracle MySQL. An attacker...
UBUNTU-CVE-2020-2914
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...
UBUNTU-CVE-2020-2853
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
UBUNTU-CVE-2020-2896
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
UBUNTU-CVE-2020-2897
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
Unspecified Vulnerability in SAP Business Client
SAP Business Client is a business client software from SAP Germany. A security vulnerability exists in SAP Business Client versions 6.5 and 7.0, which can be exploited by attackers to modify the installed program...