CVE-2020-2595: Undefined Security Weakness

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: GraalVM Compiler. The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalV...

CVE-2020-2543: Undefined Security Weakness

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2687: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Elastic Search. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2020-2719: Undefined Security Weakness

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2020-2515: Undefined Security Weakness

Vulnerability in the Database Gateway for ODBC component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via OracleN...

PT-2020-1517 · Oracle · Siebel Ui Framework

Name of the Vulnerable Software and Affected Versions: Oracle Siebel CRM Siebel UI Framework versions 19.7 and prior Description: The issue is related to insufficient access controls in the UIF Open UI component of the Siebel UI Framework product. It allows an unauthenticated attacker with networ...

PT-2020-1346

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.18 and prior Description The issue is related to inadequate access control in the MySQL Server product, specifically in the Server: Information Schema component. It allows an attacker with network access via multiple...

PT-2020-1530

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 12.2.1.3.0 through 12.2.1.4.0 Description The issue is related to inadequate access control in the Analytics Server component. It allows an unauthenticated attacker with network access v...

PT-2020-1352

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 12.0.1 through 12.4.0 Oracle FLEXCUBE Universal Banking versions 14.0.0 through 14.3.0 Description The issue is related to a lack of protection for service data in the Infrastructure component of Orac...

PT-2020-1543

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM Human Resources version 9.2 Description The issue is related to inadequate access control in the Company Dir / Org Chart Viewer component. It allows a low-privileged attacker with network access via HTTP to compromise...

PT-2020-1409

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation version 16.0 Description The issue is related to insufficient access control in the Internal Operations component of the Oracle Retail Customer Management and Segmentation Foundatio...

PT-2020-1338

Name of the Vulnerable Software and Affected Versions Oracle Banking Payments versions 14.1.0 through 14.3.0 Description The issue is related to insufficient access control in the Core component of Oracle Banking Payments, allowing a remote attacker to gain unauthorized access to protected...

PT-2020-1302

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.1.0 through 12.4.0 Oracle FLEXCUBE Investor Servicing versions 14.0.0 through 14.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCU...

PT-2020-1347

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CC Common Application Objects versions 9.1 through 9.2 Description The issue is related to inadequate access control in the Approval Framework component of PeopleSoft Enterprise CC Common Application Objects, allowing an...

PT-2020-1467

Name of the Vulnerable Software and Affected Versions Oracle GraalVM Enterprise Edition version 19.3.0.2 Description The issue is related to insufficient access control in the GraalVM Compiler component of Oracle GraalVM Enterprise Edition. This allows an unauthenticated attacker with network...

Realtek Chip ADSL Cat/Optical Cat Serial Port Command Execution Vulnerability in Realtek Semiconductor Co.

Realtek Corporation Realtek is a supplier of audio and networking chips. Realtek Semiconductor Corporation Realtek chip ADSL cat/optical cat serial port there is a command execution vulnerability, an attacker can use the vulnerability through the modem's arbitrary IPv4 address to access the...

The vulnerability of the network web interface for controlling microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to gain unauthorized access to read data.

The vulnerability of the network web interface for controlling Microprogrammed Software-IP Telephones of the Cisco SPA100 Series is caused by errors in the validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read data...

TerraMaster F2-210 Information Disclosure Vulnerability (CNVD-2019-38809)

The Terramaster F2-210 is an entry-level two-drive NAS. An information disclosure vulnerability exists in the TerraMaster F2-210. An attacker could exploit this vulnerability to gain unauthorized read access to shared files...

CVE-2019-18384

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrated by the filename=public%25252FadminOnlyRead.txt substring...

CVE-2019-2952

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...