OpenJDK: Incorrect handling of Certificate messages during TLS handshake (JSSE, 8232581)

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...

The vulnerability of Firefox’s browser security policy allows a hacker to gain unauthorized access to confidential data and compromise data integrity.

The vulnerability of Firefox’s browser security policy is related to the lack of measures to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to confidential data and compromise data integrity using object tags...

The vulnerability of the recursive cloning component of the distributed Git version control system allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the recursive cloning component of the distributed version control system Git is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and...

The vulnerability of the component responsible for checking the names of submodules in the Git version control system allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the component responsible for checking the names of sub-modules in the distributed version control system Git is related to a lack of input data validation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service...

PT-2020-12780

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2020.1.659 Description The issue allows DB export to be accessible to read-only administrators, which could lead to unauthorized data access. Recommendations For versions prior to 2020.1.659, update to...

The vulnerability in the Git version control system’s component that handles NTFS Alternate Data Streams allows a attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Git version control system’s NTFS Alternate Data Streams handling component is related to a lack of input validation mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

OpenJDK: Application data accepted before TLS handshake completion (JSSE, 8235691)

A flaw was found in the TLS/SSL implementation in the JSSE component of OpenJDK, where it did not properly handle application data packets received before the handshake completion. This flaw allowed unauthorized injection of data at the beginning of a TLS session...

The vulnerability in Google Chrome’s built-in Database API, IndexedDB, allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome’s built-in Database API, IndexedDB, relates to memory management after freeing resources. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and accessibility through a specially...

Oracle Unauthorized Access Vulnerability

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-24427)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-23421)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle Java SE (CNVD-2020-72710)

Oracle Java SE is a U.S. Oracle Oracle for the development and deployment of desktop, server and embedded devices and real-time environments in Java applications. A security vulnerability exists in the JSSE component in Oracle Java SE versions 11.0.6 and 14. An attacker could exploit the...

Unspecified Vulnerability in Oracle Fusion Middleware Access Manager

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. A security vulnerability exists in the Access Manager version 11.1.2.3.0 an...

Oracle MySQL Server Denial of Service Attack Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server 5.7.29 and earlier versions and the InnoDB component of Oracle MySQL 8.0.19 and earlier versions...

Unspecified Vulnerability in Oracle E-Business Suite iSupport

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the Internet-based customer support...

The vulnerability of the header::add_INFO_descriptor function in the VCF file handling package VCFtools allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the header::addINFOdescriptor function in the VCF file handling library VCFtools relates to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through a specially created vcf fi...

Unspecified Vulnerability in Oracle E-Business Suite Universal Work Queue

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Universal Work Queue is one of the tools that c...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HRMS

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Corporation. The product provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HRMS is one of the human resource management components,...

Oracle Weblogic Server Information Disclosure Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

Oracle GraalVM Enterprise Edition Unauthorized Access Vulnerability (CNVD-2020-26995)

Oracle GraalVM is the United States Oracle Oracle company's set of instant compiler written in the Java language. A security vulnerability exists in Oracle GraalVM in the Tools component of Oracle GraalVM Enterprise Edition versions 19.3.1 and 20.0.0. An attacker could exploit the vulnerability t...