922 matches found
CVE-2020-13909: Undefined Security Weakness
The Ignition component before 2.0.5 for Laravel mishandles globals, get, post, cookie, and env. NOTE: in the 1.x series, versions 1.16.15 and later are unaffected as a consequence of the CVE-2021-43996 fix...
CVE-2020-13249: Undefined Security Weakness
libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadblib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle...
CVE-2019-20777: Undefined Security Weakness
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. WapService mishandles OTA Provisioning on V40 and G7 devices. The LG ID is LVE-SMP-190006 July 2019...
CVE-2020-6237: Undefined Security Weakness
Under certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2, dswsbobje web application allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...
CVE-2019-11343: Undefined Security Weakness
Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java...
CVE-2020-3844: Undefined Security Weakness
This issue was addressed with improved checks. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Users removed from an iMessage conversation may still be able to alter state...
CVE-2014-9530: Undefined Security Weakness
A vulnerability exists in nw.js before 0.11.3 when calling nw methods from normal frames, which has an unspecified impact...
CVE-2011-4115: Undefined Security Weakness
Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files...
CVE-2011-2668: Undefined Security Weakness
Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header...
CVE-2020-2692: Undefined Security Weakness
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...
CVE-2020-2611: Undefined Security Weakness
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...
CVE-2020-2644: Undefined Security Weakness
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Oracle Management Service. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP ...
CVE-2019-19859: Undefined Security Weakness
An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database...
CVE-2020-2569: Undefined Security Weakness
Vulnerability in the Oracle Applications DBA component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where...
CVE-2020-2585: Undefined Security Weakness
Vulnerability in the Java SE product of Oracle Java SE component: JavaFX. The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...
CVE-2019-14302: Undefined Security Weakness
On Ricoh SP C250DN 1.06 devices, a debug port can be used...
CVE-2019-18386: Undefined Security Weakness
Systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series can fault and have other unspecified impact when receiving specifically crafted message payloads over a systems management communication channel...
CVE-2019-19617: Undefined Security Weakness
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php...