Oracle MySQL Server InnoDB Denial of Service Vulnerability

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability in Oracle MySQL Server InnoDB 5.7.31 and earlier, 8.0.21 and earlier allows a low-privileged attacker to compromise MySQL Server via network access over multiple protocols.An attacker could exploit this...

DEBIAN-CVE-2020-14789

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

UBUNTU-CVE-2020-14771

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: LDAP Auth. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to...

UBUNTU-CVE-2020-14769

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2020-1669

The Juniper Device Manager JDM container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes in the world-readable file /etc/passwd. This is not a security best current practice as it can allow an attacker with access to the local...

PT-2020-15760 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.21 Description: A security issue was found in the mod latestactions module, where the lack of proper escaping allows for cross-site scripting XSS attacks. Recommendations: For versions prior to 3.9.21, update to...

Tiki Cross-Site Scripting Vulnerability (CNVD-2020-44400)

Tiki is a suite of open source content management and portal applications from the Tiki community that can be used to create web applications, portals, corporate intranets, extranets, and more. A cross-site scripting vulnerability exists in versions prior to Tiki 21.2. The vulnerability stems fro...

CVE-2020-10288

IRC5 exposes an ftp server port 21. Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't empty it will be accepted...

CVE-2020-11622

A vulnerability exists in Arista’s Cloud EOS VM / vEOS 4.23.2M and below releases in the 4.23.x train, 4.22.4M and below releases in the 4.22.x train, 4.21.3M to 4.21.9M releases in the 4.21.x train, 4.21.3FX-7368., 4.21.4-FCRFX., 4.21.4.1, 4.21.7.1, 4.22.2.0.1, 4.22.2.2.1, 4.22.3.1, and 4.23.2.1...

CVE-2020-10516

An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gain access to unauthorized repositories within an organization. This vulnerability affected all versions of GitHub Enterprise Server prior t...

The vulnerability of the FTP service (default ports 21/tcp and 5411/tcp), which is used by the SiNVR 3 video server, allows a hacker to gain access to protected information.

The vulnerability of the FTP service default ports 21/tcp and 5411/tcp of the SiNVR 3 video server is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

PT-2020-13308 · Ericsson +1 · Erlang/Otp +1

Name of the Vulnerable Software and Affected Versions: Yaws versions 2.0.2 through 2.0.7 Description: The issue concerns the loading of obsolete TLS ciphers in Yaws, which can be exploited for Sweet32 attacks. This occurs when Yaws is running on an Erlang/OTP virtual machine with a version less...

Intel Driver and Support Assistant Competitive Conditions Issue Vulnerability

Intel Driver and Support Assistant is an Intel Driver and Support Assistant application from Intel Corporation USA. The program is mainly used to detect and install system driver updates. A Competing Conditions Issue vulnerability exists in Intel Driver and Support Assistant versions prior to...

Intel PROSet/Wireless WiFi Software Buffer Overflow Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. A security vulnerability exists in the kernel mode driver in Intel PROSet/Wireless WiFi Software versions prior to 21.70 Windows 10. A remote attacker can exploit this vulnerability to cause a denial of service...

CVE-2020-0557

Insecure inherited permissions in IntelR PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

Honeywell INNCOM INNControl 3 Privilege Mismanagement Vulnerability

Honeywell INNCOM INNControl 3 is an energy management and room control system from Honeywell USA. A security vulnerability exists in Honeywell INNCOM INNControl 3 version 3.21 and prior. An attacker can exploit the vulnerability to elevate user privileges by modifying local configuration files...

Intel PROSet/Wireless WiFi Software Logic Error Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. A logic error vulnerability exists in Intel PROSet/Wireless WiFi Software versions prior to 21.40, which can be exploited by a local attacker to elevate privileges, cause a denial of service, and disclose...

Intel PROSet/Wireless WiFi Software Buffer Overflow Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. A buffer overflow vulnerability exists in Intel PROSet/Wireless WiFi Software versions prior to 21.40, which arises when a network system or product performs an operation in memory without properly validating th...

CVE-2019-13420

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

CVE-2019-0318

Under certain conditions SAP NetWeaver Application Server for Java Startup Framework, versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted...