The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to modify, add, or delete data...

The vulnerability of the Workflow Notification Mailer component of the Oracle Workflow software, a system for automating business processes within the Oracle E-Business Suite. This component allows an intruder to access, modify, add, or delete data.

The vulnerability of the Workflow Notification Mailer component of the Oracle Workflow software in the Oracle E-Business Suite relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows attackers to gain access to modify, add, or delete data, as well as to unauthorizedly access protected information.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing e-commerce stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to remotely gain access to modify, add, or...

The vulnerability of the Absence Recording component in the Oracle Human Resources HR management software allows a violator to gain access to modify, add, or delete data.

The vulnerability of the Absence Recording component in the Oracle Human Resources HR management software is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the User Interface component in Oracle iSupport, which allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the User Interface component in Oracle iSupport is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data using the HTTP protocol...

CVE-2020-5876

On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exists where mcpd and other processes may make unencrypted connection attempts to a new configuration sync peer. The race condition can occur when changing the ConfigSync IP address...

Storefront | Unable To Join Secondary Storefront Server To Server Group.

ERROR: Unable to join server in existing server group. Add server failed - Add of server XYZ to server group failed. In event logs we could see 'access is denied' exception while running the command : 'Add-DSCertificateToDSStore'...

CVE-2020-10491

CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request...

CVE-2020-10480

CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new category via a crafted request...

CVE-2020-10479

CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news article via a crafted request...

Cross site request forgery (csrf)

CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request...

CVE-2019-14030

The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networkin...

CVE-2020-9018

LiteCart through 2.2.1 allows admin/?app=users&doc=edituser CSRF to add a user...

Axous has multiple vulnerabilities

Axous is a software provider of online store systems. A cross-site request forgery and cross-site scripting vulnerability exists in Axous 1.1.1 and prior versions. An attacker can exploit this vulnerability to add an administrator account or inject arbitrary code...

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application allows a perpetrator to gain unauthorized access to modify, add, or delete data.

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to modify, add, or delete data using the...

CVE-2019-19668

A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete the file types that are used on the server via RAPR/TriggerServerFunction.html...

CVE-2016-9928

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets...

The vulnerability of the JavaFX component of the Java SE software platform allows attackers to gain access to modify, add, or delete data.

The vulnerability of the JavaFX component of the Java SE software platform is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data...

The vulnerability of the Global EM Framework component of the Enterprise Manager Base Platform allows a perpetrator to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.

The vulnerability of the Global EM Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected information...

The vulnerability in the Networking component of Oracle Java SE and Java SE Embedded software components allows attackers to modify, add, or delete data, or gain unauthorized access to protected information.

The vulnerability of Oracle Java SE and Java SE Embedded software’s Networking component is related to errors in URL normalization. Exploiting this vulnerability can allow an attacker to gain access to, modify, add, or delete data, or to obtain unauthorized access to protected information...