mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Cisco SD-WAN vManage Software License Issue Vulnerability (CNVD-2020-44061)

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An authorization issue vulnerability exists in the web management interface in Cisco SD-WAN vManage Software. A remote attacker could exploit this vulnerability with a...

ICSA-20-212-02_Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: Mitsubishi Electric, Multiple Factory Automation Engineering Software products Vulnerability: Permission Issues 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update...

ABB Central Licensing System

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: ABB Equipment: Central Licensing System CLS Vulnerabilities: Information Exposure; Improper Restriction of XML External Entity Reference; Uncontrolled Resource Consumption; Permissions, Privilege,...

PT-2020-1711

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in processing objects in memory within the Windows Graphics component of the Windows operating system. This can allow an attacker to elevate their privileges. T...

PT-2020-1319

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Win32k component of Windows, which fails to properly handle objects in memory. This can be exploited by an attacker usin...

CVE-2018-2875

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to compromise Core RDBMS. While th...

UBUNTU-CVE-2019-2982

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

BELL-CVE-2019-15239 CVE-2019-15239 does not affect BellSoft software

Bulletin has no description...

mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

BELL-CVE-2019-12222 CVE-2019-12222 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2019-3839 CVE-2019-3839 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2019-12098 CVE-2019-12098 does not affect BellSoft software

Bulletin has no description...

CVE-2019-6690: Improper Input Validation

python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Improper Input Validation" issue affecting...

PT-2019-11241

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2019-11246

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

BELL-CVE-2019-9169 CVE-2019-9169 does not affect BellSoft software

Bulletin has no description...

PT-2019-19286

Name of the Vulnerable Software and Affected Versions MDaemon Webmail versions 14.x through 18.x before 18.5.2 Description A cross-site scripting issue allows attackers to affect the system. This is related to a cross-site scripting XSS vulnerability. Recommendations For MDaemon Webmail versions...

ABB CP400 Panel Builder TextEditor 2.0

1. EXECUTIVE SUMMARY CVSS v7.0 Vendor: ABB Equipment: CP400 Panel Builder TextEditor 2.0 Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code, and cause a denial-of-service condition within the...

UBUNTU-CVE-2018-3309

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is prior to 5.2.22. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...