Oracle Retail Customer Management and Segmentation Foundation Unauthorized Access Vulnerability (CNVD-2020-05110)

Oracle Retail Customer Management and Segmentation Foundation is a retail customer management product. A security vulnerability exists in the Security component of Oracle Retail Customer Management and Segmentation Foundation 18.0. An attacker could exploit the vulnerability to cause unauthorized...

Oracle Java SE/Java SE Embedded CVE-2020-2590 Remote Security Vulnerability

Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over 'Kerberos' protocol. This issue affects the 'Security' component. This vulnerability affects the following supported versions: Java SE: 7u241, 8u231, 11.0.5, 13.0....

Unspecified Vulnerability in Security Group of Multiple Apple Products

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple iPadOS is an operating system for iPad tablets. security is one of the security components. A security vulnerability exists in the...

The vulnerability of the Security component in the Symfony software development and web application management platform allows attackers to escalate their privileges.

The vulnerability of the Security component in the Symfony software development and web application management framework is related to session management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

The vulnerability of the Security component in Java SE and Java SE Embedded software platforms allows attackers to gain unauthorized access to protected information.

The vulnerability of the Security component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through various network...

Oracle Business Intelligence Publisher Multiple Vulnerabilities (Oct 2019 CPU)

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.9.x prior to 11.1.1.9.191015 or 12.2.1.3.x prior to 12.2.1.3.191015 or 12.2.1.4.x prior to 12.2.1.4.191015. It is, therefore, affected by multiple vulnerabilities as noted in the October 2019 Critical Patch...

Oracle BI Publisher Unauthorized Access Vulnerability (CNVD-2019-37409)

Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage and deliver all reports and documents. A security vulnerability exists in the BI Publisher Security component in Oracle BI Publisher 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. ...

The vulnerability of the Security component in Java SE and Java SE Embedded software platforms allows a perpetrator to gain unauthorized access to information.

The vulnerability of the Security component in Java SE and Java SE Embedded software-related programs is related to deficiencies in access control. Exploiting this vulnerability may allow an attacker operating remotely to gain unauthorized access to information...

Oracle Java SE/Java SE Embedded CVE-2019-2894 Remote Security Vulnerability

Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over Multiple protocols. This issue affects the 'Security' component. This vulnerability affects the following supported versions: Java SE: 7u231, 8u221, 11.0.4, 13; Ja...

Apple macOS Mojave Security Buffer Overflow Vulnerability

Apple macOS Mojave is a specialized operating system developed by Apple Inc. for Mac computers.Security is one of the security components of the system. A buffer overflow vulnerability exists in the Security component of Apple macOS Mojave, which arises when a networked system or product performs...

NewStart CGSL MAIN 4.05 : java-1.7.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0105)

The remote NewStart CGSL host, running version MAIN 4.05, has java-1.7.0-openjdk packages installed that are affected by multiple vulnerabilities: - It was found that the JAXP component of OpenJDK failed to correctly enforce parse tree size limits when parsing XML document. An attacker able to ma...

NewStart CGSL MAIN 4.05 : java-1.8.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0119)

The remote NewStart CGSL host, running version MAIN 4.05, has java-1.8.0-openjdk packages installed that are affected by multiple vulnerabilities: - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE:...

The vulnerability of the Security component of the Oracle Hyperion Planning application, which automates budget management processes, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security component of the Oracle Hyperion Planning application, which is used for automating budget management processes, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access t...

Information Disclosure

openjdk is vulnerable to information disclosure. It was discovered that the AccessController class implementation in the Security component of OpenJDK failed, in certain cases, to consider the current context and correctly restrict privileges based on it. An untrusted Java application or applet...

Apple macOS Multiple Arbitrary Code Execution Vulnerability (CNVD-2019-25207)

Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers. An arbitrary code execution vulnerability exists in the Disk Management component and Security component in Apple macOS Mojave versions prior to 10.14.6. An attacker can exploit this vulnerability to execut...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown function of the component Security. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a parital denial of service...

Information Disclosure

Java SE, Java SE Embedded and JRockit are vulnerable to information disclosure. A local, unauthenticated attacker could submit malicious input leading to the exploitation of the flawed Security component enabling access to critical data or complete access to all Java SE, Java SE Embedded and...

Denial Of Service (DoS)

Oracle MySQL is vulnerable to denial of serviceDoS attacks. A remote user could exploit a flaw in the Server: Security: Privileges component which allows unauthorized attackers to cause frequently repeatable crash on the target system...

Privilege Escalation

Java SE, Java SE Embedded and JRockit are vulnerable to privilege escalation attacks. A remote, unauthenticated attacker could submit malicious input leading to the exploitation of the flawed Security component to gain elevated privileges. Successful attacks could result in unauthorized access to...

Privilege Escalation

Java SE, Java SE Embedded and JRockit are vulnerable to privilege escalation attacks. A remote, unauthenticated attacker could submit malicious input leading to the exploitation of the flawed Security component to gain elevated privileges. Successful attacks could result in takeover of Java SE,...