Unspecified Vulnerability in Oracle Primavera Portfolio Management (CNVD-2020-52049)

Primavera Portfolio Management is a software solution for advising, planning, controlling and strategically analyzing your portfolio. A security vulnerability exists in the Investor Module component in Primavera Portfolio Management 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0, 19.0.0. An attacker could...

PT-2020-3591

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Communications Broker versions 3.0.0 through 3.2.0 Description The issue is related to insufficient input validation in the WebGUI component of Oracle Enterprise Communications Broker, allowing an unauthenticated attacker wit...

Unspecified Vulnerability in Oracle Primavera Portfolio Management (CNVD-2020-52052)

Primavera Portfolio Management is a software solution for advising, planning, controlling and strategically analyzing your portfolio. A security vulnerability exists in the Web Access component in Primavera Portfolio Management 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0, 19.0.0.0. An attacker could...

CVE-2020-14722: Undefined Security Weakness

Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications component: WebGUI. Supported versions that are affected are 3.0.0-3.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2020-3390

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue is related to insufficient input validation in the Sample apps component of Oracle WebLogic Server, allowing an...

PT-2020-3862

Name of the Vulnerable Software and Affected Versions: Primavera Portfolio Management versions 16.1.0.0 through 16.1.5.1 Primavera Portfolio Management versions 18.0.0.0 through 18.0.2.0 Primavera Portfolio Management version 19.0.0.0 Description: The issue is related to insufficient input...

CVE-2020-14692: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2020-14601: Improper Neutralization of Input During Web Page Generation

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2020-14621: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JAXP. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2020-14573: Undefined Security Weakness

Vulnerability in the Java SE product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks o...

CVE-2020-14593: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

PT-2020-3460

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HRMS version 9.2 Description The issue is related to inadequate access control in the Time and Labor component of Oracle PeopleSoft Enterprise HRMS. It allows a low-privileged attacker with network access via HTTP to...

PT-2020-3464

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware MapViewer versions 12.2.1.3.0 through 12.2.1.4.0 Description The issue is related to the Oracle Fusion Middleware MapViewer product, specifically the Tile Server component. It allows an unauthenticated attacker with...

PT-2020-3446

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Session Border Controller versions 8.1.0 through 8.3.0 Description The issue is related to the File Upload component and can be exploited by a high-privileged attacker with network access via HTTP. Successful attacks require...

PT-2020-3461

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 12.2.1.3.0 through 12.2.1.4.0 Description The issue is related to insufficient access control in the Composer component of Oracle WebCenter Portal, allowing a remote attacker to modify, add, or delete data, or...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

The vulnerability of the implementation of the Single Thread Indirect Branch Predictors (STIBP) in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Linux operating system’s kernel implementation of the Single Thread Indirect Branch Predictors STIBP technology is related to insufficient input data validation and incorrect implementation of functions. Exploiting this vulnerability can allow an attacker to gain...

PT-2020-14298

Name of the Vulnerable Software and Affected Versions mapfish-print versions prior to 3.24 Description The issue allows a user to perform an XML External Entity XXE attack using the provided SDL style. This can be exploited by manipulating the XML input to access unauthorized data or disrupt...

CVE-2020-5583

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors...

CVE-2020-5583

CVE-2020-5583 affects Cybozu Garoon 4.0.0 to 5.0.1. The vulnerability allows remote authenticated attackers to bypass access restrictions and obtain unauthorized Multi-Report data via unspecified vectors, effectively bypassing view privileges for that data. Impact is limited to exposure of Multi-...