CVE-2020-14548: Undefined Security Weakness

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

CVE-2020-14577: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to...

CVE-2020-14581: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocol...

PT-2020-3874

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to a lack of protection for service data in the libsuri component of Oracle Solaris. This can be exploited to gain unauthorized access to protected information. The vulnerability is...

CVE-2020-14634: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

PT-2020-3436

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.5 through 12.2.9 Description The issue is related to the Logging component of the Oracle Application Object Library product. It allows an unauthenticated attacker with network access via HTTP to compromise...

PT-2020-3457

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Reporting and Analytics version 9.1.0 Description The issue is related to inadequate access control in the Reporting component of Oracle Hospitality Reporting and Analytics. It allows a high-privileged attacker with network...

PT-2020-3532

Name of the Vulnerable Software and Affected Versions Java SE versions 8u251, 11.0.7, and 14.0.1 Java SE Embedded version 8u251 Description The issue is related to insufficient input validation in the 2D component of Oracle Java SE and Java SE Embedded. It allows an unauthenticated attacker with...

PT-2020-3528

Name of the Vulnerable Software and Affected Versions Java SE versions 7u261, 8u251, 11.0.7, and 14.0.1 Java SE Embedded version 8u251 Description The issue is related to insufficient input validation in the JSSE component of Oracle Java SE and Java SE Embedded. This can allow a remote attacker t...

PT-2020-3437

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.20 and prior Description The issue is related to a lack of protection for service data in the InnoDB component of Oracle MySQL Server. This can be exploited by a highly privileged attacker with network access via...

PT-2020-18431

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC9 versions prior to 4.20.20.20 Description The issue allows a remote authenticated malicious user with low privileges to potentially gain unauthorized read access to arbitrary files by manipulating input parameters. Recommendatio...

CVE-2020-5366: Improper Limitation of a Pathname to a Restricted Directory

Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability by manipulating input parameters to gain unauthorized read access to the arbitrary files...

CVE-2020-7501

A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic V1.1 HotFix 16 and prior and Vijeo Designer V6.2 SP9 and prior which could cause unauthorized read and write when downloading and uploading project or firmware into Vijeo Designer Basic and Vijeo Designer...

CVE-2020-7501: Use of Hard-coded Credentials

A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic V1.1 HotFix 16 and prior and Vijeo Designer V6.2 SP9 and prior which could cause unauthorized read and write when downloading and uploading project or firmware into Vijeo Designer Basic and Vijeo Designer...

Siemens LOGO!8 BM Access Control Error Vulnerability (CNVD-2020-43685)

The Siemens LOGO!8 BM is a programmable logic controller from Siemens, Germany. An access control error vulnerability exists in Siemens LOGO!8 BM all versions, which stems from a lack of identity authentication in the program. An attacker with access to port 135/tcp could exploit this vulnerabili...

PT-2020-3595

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.6.48 and prior MySQL Server versions 5.7.30 and prior MySQL Server versions 8.0.20 and prior Oracle PeopleSoft Enterprise PeopleTools affected versions not specified Description The issue allows an attacker with network...

CVE-2020-7646

curlrequest through 1.0.1 allows reading any file by populating the file parameter with user input...

PT-2021-1880

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.19 and prior Description The issue is related to insufficient input validation in the Server: Security: Privileges component of MySQL Server, allowing a high-privileged attacker with network access via multiple...

Oracle Unauthorized Read Vulnerability

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle Siebel CRM Siebel UI Framework Unauthorized Read Vulnerability

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions. The program includes sales management, marketing management, customer service systems, call center modules. Siebel UI Framework is one of the user interface framework components. A...