The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a perpetrator to compromise data integrity, gain access to confidential information, and cause partial service disruption.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise data integrity, gain access to confidential information, and cause partial service...

The vulnerability of Oracle Java SE’s 2D software platform allows a hacker to cause partial service interruption.

The vulnerability of the Oracle Java SE 2D software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause partial service interruptions remotely...

The vulnerability of the `rtl_p2p_noa_ie` function in the Linux kernel’s `drivers/net/wireless/realtek/rtlwifi/ps.c` file is related to buffer overflows in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the rtlp2pnoaie function in the drivers/net/wireless/realtek/rtlwifi/ps.c file of the Linux kernel is related to a lack of mechanism for checking the size of copied data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

The vulnerability of the srxpfe process in the JunOS operating system’s SRX Series network interfaces allows a attacker to trigger a service failure.

The vulnerability of the srxpfe process in the JunOS operating system’s SRX Series network interfaces is related to errors in processing PIM messages. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the rtreenode() function in the SQLite database management system allows a attacker to cause a service failure, execute arbitrary code, or disclose sensitive information.

The vulnerability of the rtreenode function in the SQLite database management system is related to the occurrence of read operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures, execute arbitrary code, or disclose sensitive informati...

The vulnerability of the libssh2 library, related to writing beyond the buffer boundaries in memory, allows a attacker to cause a service failure, execute arbitrary code, or disclose sensitive information.

The vulnerability of the libssh2 library lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures, execute arbitrary code, or disclose sensitive information...

The vulnerability of the VPN packet processing function in the implementation of the Point-to-Point Tunneling Protocol of Cisco Aironet Access Points of models 1560, 2800, 3800, and 4800 allows a hacker to cause a service failure.

The vulnerability of the VPN packet processing function in the implementation of the Point-to-Point Tunneling Protocol of Cisco Aironet Access Points of models 1560, 2800, 3800, and 4800 exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the BPDU-frames redirection function in Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, and 3800 series allows a hacker to cause service failure.

The vulnerability of the BPDU frame redirection function in Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, and 3800 series exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Profinet software driver for automation and control systems in industrial processes, allowing a intruder to trigger a service failure.

The vulnerability of the Profinet software driver for automation and control systems in industrial processes involves division by zero errors. Exploiting this vulnerability could allow a malicious actor to trigger service failures by sending specially crafted DCP packets...

OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

PT-2019-5300

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.0.0 through 2.9.10.1 FasterXML jackson-databind versions 2.6.0 through 2.6.7.3 FasterXML jackson-databind versions 2.7.0 through 2.7.9.6 FasterXML jackson-databind versions 2.8.0 through 2.8.11.4 Descripti...

OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

OpenJDK: Out of bounds access in optimized String indexof implementation (Hotspot, 8224062)

Vulnerability in the Java SE product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of th...

CVE-2019-2972

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2970

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2954

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with logon to the infrastructu...

The vulnerability of CMS websites for collaborative work with MediaWiki, related to cross-site request forgery, allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of CMS websites for collaborative work with MediaWiki is related to cross-site request forgery attacks. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of Blink’s web page display mechanism in the Google Chrome browser is related to the use of pointers after memory release. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

The vulnerability of the icalmemory_strdup_and_dequote function in the iCal calendar software for Thunderbird email processing, related to the execution of operations outside the buffer in memory. This vulnerability allows an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the icalmemorystrdupanddequote function in the iCal calendar software for Thunderbird email processing is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cau...