Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59062)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Stored Procedure component of Oracle MySQL Server 5.6.49, 5.7.31, 8.0.21 and earlier versions. An...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59059)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Logging component of Oracle MySQL Server 8.0.21 and earlier. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59058)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Security: Privileges component of Oracle MySQL Server 8.0.21 and earlier. An attacker can exploit...

Unspecified Vulnerability in Oracle Java SE and Oracle Java SE Embedded (CNVD-2020-61054)

Java SE is short for Java Platform Standard Edition, which is used to develop and deploy Java applications on desktops, servers, and embedded devices and real-time environments. Java SE Embedded is based on Java SE and provides specific features and support for embedded systems. An unspecified...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58232)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58246)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the InnoDB component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...

Unspecified Vulnerability in Oracle BI Publisher (CNVD-2020-61056)

Oracle BI Publisher is an intelligent business publishing product from Oracle USA. The product can output data in a certain format into a report format. A security vulnerability exists in Oracle Fusion Middleware component: E-Business Suite - XDO for multiple versions of Oracle BI Publisher. An...

Unspecified Vulnerability in Oracle Java SE (CNVD-2020-61050)

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE. An attacker could exploit the vulnerability to gain unauthorized read...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59069)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59068)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Security: Encryption component of Oracle MySQL Server 8.0.21 and earlier. An attacker can exploit...

VulnCheck KEV: CVE-2020-17087

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation...

Cross site scripting

Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2020-5650

CVE-2020-5650 is a cross-site scripting (XSS) vulnerability in the WordPress plugin Simple Download Monitor (versions ≤ 3.8.8). The issue allows remote attackers to inject arbitrary scripts via unspecified vectors, potentially affecting the logged-in user’s browser. Multiple connected sources con...

CVE-2020-5650

Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...

Unspecified Vulnerability in SAP Commerce Cloud

SAP Commerce Cloud is an e-commerce cloud platform from SAP Germany. The platform provides enterprise-level e-commerce business support. There is a security vulnerability in SAP Commerce Cloud and no details of the vulnerability are provided at this time...

Unspecified Vulnerability in Foxit Reader and PhantomPDF (CNVD-2020-59789)

Foxit Reader and PhantomPDF are China Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1. No details of the vulnerabilities are available at this time...

Unspecified Vulnerability in GitLab (CNVD-2020-63395)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions 13.4.2...

PT-2020-4326 · Microsoft · Graphics Components +1

Name of the Vulnerable Software and Affected Versions: Microsoft Graphics Components affected versions not specified Description: A remote code execution issue exists in the way Microsoft Graphics Components handle objects in memory. An attacker who successfully exploits this issue could execute...

PT-2020-4372 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: .NET Framework affected versions not specified Description: An information disclosure issue exists due to the .NET Framework's improper handling of objects in memory. This could allow an attacker to disclose contents of an affected system's...

PT-2020-4280 · Microsoft · Office Click-To-Run

Name of the Vulnerable Software and Affected Versions: Microsoft Office Click-to-Run C2R affected versions not specified Description: The issue is related to errors in handling objects in memory, which can allow an attacker to elevate their privileges. To exploit this, an attacker would need to...