Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

...

Blueman Injection Vulnerability

Blueman is a graphical Bluetooth management tool for the GNOME desktop environment from the Blueman team. The main functions are: sending files, browsing files on the device, viewing information about local or remote devices, configuring local devices, managing bindings, binding services, etc...

jackson-databind: Lacks certain xbean-reflect/JNDI blocking

A flaw was found in FasterXML jackson-databind in versions 2.0.0 through 2.9.10.2. A "gadget" exploit is possible due to a lack of a Java object being blocking from being deserialized. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabili...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59064)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Security: Encryption component of Oracle MySQL Server 8.0.20 and earlier. An attacker can exploit...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59061)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: X Plugin component of Oracle MySQL Server 8.0.21 and earlier. An attacker can exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58232)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58236)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58745)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. A security vulnerability exists in the InnoDB component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker can exploit this vulnerability to cause MySQL Server to hang or...

CVE-2020-14731

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Segment. Supported versions that are affected are 18.0 and 19.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

UBUNTU-CVE-2020-14893

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

UBUNTU-CVE-2020-14891

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Command Execution Vulnerability in Qiji Fortress v5.0 at Zhejiang Qiji Technology Co. Ltd (CNVD-2020-59415)

Qiji Technology is a product-based company founded by O&M management experts and focused on O&M operations. A command execution vulnerability exists in Zhejiang Qiji Technology Co. Qiji Fortress v5.0, which can be exploited by an attacker to gain server control privileges...

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability (CNVD-2020-57591)

Microsoft Dynamics 365 is Microsoft's next-generation intelligent business application that helps enterprises grow and digitally transform through the perfect integration of CRM and ERP. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 versions 8.2 and 9.0. The vulnerability...

UBUNTU-CVE-2020-15251

In the Channelmgnt plug-in for Sopel a Python IRC bot before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with MirahezeBot-Plugins with versions from 9.0.0 and less than 9.0.2 affected. Version 9.0.2...

PT-2020-5835 · Phpmyadmin +1 · Phpmyadmin +1

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions 5.0.2 and earlier Description: The issue is related to a lack of neutralization of elements in a CSV file in the "Export" function of the phpMyAdmin web application for database management. This could allow a remote attack...

OPENSUSE-SU-2020:1604-1 Security update for zabbix

This update for zabbix fixes the following issues: Updated to version 3.0.31. + CVE-2020-15803: Fixed an XSS in the URL Widget boo1174253...

freerdp: out-of-bounds read in ntlm_read_AuthenticateMessage

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlmreadAuthenticateMessage. This has been fixed in 2.1.0...

Telmat AccessLog Privilege Vulnerability

Telmat AccessLog is an access log monitoring product from Telmat France. The product protects public and private networks based on access logs. A security vulnerability exists in Telmat AccessLog 6.0 TAL20180415 and prior versions, which stems from an incorrectly programmed call to an advanced...

CVE-2018-6448

A vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric OS v9.0.0 could allow a remote attacker to perform a denial of service attack on the vulnerable host...

PT-2020-15509 · Jenkins · Jenkins Warnings Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Warnings Plugin versions 5.0.1 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to execute arbitrary code. This issue arises because the plugin does not require POST requests for a form...