Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

Huawei Taurus-AN00B Elevation of Privilege Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A security vulnerability exists in Huawei Taurus-AN00B versions prior to 10.1.0.156, which stems from a lack of privilege restrictions on certain business functions of the product. An attacker can exploit the vulnerabili...

CVE-2020-9331

CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation by local users with the SeChangeNotifyPrivilege right because user-mode input is mishandled during process creation. An attacker can write arbitrary data to an arbitrary location in the kernel's address space...

CVE-2020-9331

CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation by local users with the SeChangeNotifyPrivilege right because user-mode input is mishandled during process creation. An attacker can write arbitrary data to an arbitrary location in the kernel's address space...

Oracle MySQL Server InnoDB Denial of Service Vulnerability

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability in Oracle MySQL Server InnoDB 5.7.31 and earlier, 8.0.21 and earlier allows a low-privileged attacker to compromise MySQL Server via network access over multiple protocols.An attacker could exploit this...

DEBIAN-CVE-2020-14789

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

UBUNTU-CVE-2020-14771

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: LDAP Auth. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to...

UBUNTU-CVE-2020-14769

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

Huawei Mate 30 (5G) Taurus-AN00B Buffer Overflow Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A buffer overflow vulnerability exists in versions prior to Huawei Taurus-AN00B 10.1.0.156 C00E155R7P2. The vulnerability stems from a function in the module that does not adequately validate input. An attacker could use...

CVE-2020-9263

HUAWEI Mate 30 versions earlier than 10.1.0.150C00E136R5P3 and HUAWEI P30 version earlier than 10.1.0.160C00E160R2P11 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a...

CVE-2020-9109

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful...

OPENSUSE-SU-2020:1604-1 Security update for zabbix

This update for zabbix fixes the following issues: Updated to version 3.0.31. + CVE-2020-15803: Fixed an XSS in the URL Widget boo1174253...

Denial of Service Vulnerability in CSC-830 of Beijing Sifang Relay Automation Co. Ltd (CNVD-2020-59455)

CSC830 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. Beijing Sifang Relay Automation Co., Ltd CSC-830 has a denial of service vulnerability, which can be exploited by an attacker to...

DEBIAN-CVE-2020-25600

An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm either bitness ones. 32-bit x86 domain...

UBUNTU-CVE-2020-25600

An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm either bitness ones. 32-bit x86 domain...

SAP NetWeaver Cross-Site Scripting Vulnerability (CNVD-2020-52934)

SAP NetWeaver is an integrated application platform based on professional standards that dramatically reduces the complexity of system integration. Its components include portals, application servers, business intelligence solutions as well as system integration and data integration technologies....

mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

mysql: Server: DML unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Pluggable Auth. Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MyS...

mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...