postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption...

CVE-2020-6243

Under certain conditions, SAP Adaptive Server Enterprise XP Server on Windows Platform, versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected...

Unspecified Vulnerability in SAP ERP and S/4 HANA

SAP HANA and SAP ERP HCM are both products of SAP.SAP HANA is a high-performance real-time data analysis platform. The platform provides data query functions to support users to query real-time business data query and analysis.SAP ERP HCM is a set of enterprise human resource management solutions...

The vulnerability of the Anviz CrossChex access control system lies in the copying of buffers without checking the size of the input data, allowing a intruder to execute arbitrary code.

The vulnerability of the Anviz CrossChex access control system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending specially created network packets...

Android Bluetooth Buffer Overflow Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Bluetooth is one of the Bluetooth components. Bluetooth in Android version 10 suffers from a buffer overflow vulnerability that stems from a lack of boundary checking. An attacker could...

PT-2020-11996 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.16 Description: An issue was discovered in Joomla! where missing length checks in the user table can lead to the creation of users with duplicate usernames and/or email addresses. Recommendations: For versions...

Portfolio Filter Gallery < 1.1.3 - CSRF & Reflected XSS

Lack of CSRF checks on the Filters page could allow attackers to add/edit/update/delete categories and delete all categories, as well as perform reflected XSS attacks. v1.0.8 fixed the reflected XSS, however no CSRF check on delete and deleteallcategory actions v1.1.0 released, no additional fix...

PT-2020-15296 · Jenkins · Jenkins Amazon Ec2 Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Amazon EC2 Plugin versions 1.47 and earlier Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified URL within the AWS region using attacker-specified credentials IDs obtained through anoth...

CVE-2019-5272

USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the integrity which may allow an attacker with high privilege to make malicious modifications without detection...

DEBIAN-CVE-2019-19252

vcswrite in drivers/tty/vt/vcscreen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a...

Unspecified Vulnerability in CloudBees Jenkins CRX Content Package Deployer Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . CRX Content Package Deployer Plugin is used in...

DEBIAN-CVE-2019-15166

lmpprintdatalinksubobjs in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks...

PT-2019-13743 · Gogs · Gogs

Name of the Vulnerable Software and Affected Versions: Gogs version 0.11.86 Description: The issue concerns insecure permissions in Gogs, specifically affecting routes related to deploy keys, collaborators, and hooks. This is due to a lack of permission checks in the routes/api/v1/api.go file...

Security feature bypass

Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

CVE-2019-7229

The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of...

CSRF vulnerability and missing permission checks in electricflow allowed SSRF

A missing permission check in a form validation method in electricflow allowed users with Overall/Read permission to initiate a connection test to an attacker-specified server with attacker-specified username and password. Additionally, the form validation method did not require POST requests,...

CloudBees Jenkins Mattermost Notification Plugin Server Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Mattermost Notification Plugin is used in one...

The vulnerability of the systemd daemon in the Astra Linux operating system allows a hacker to circumvent the restrictions imposed by a given security policy.

The vulnerability of the systemd-based Astra Linux operating system is related to the absence of mandate-based integrity control during operations involving systemd. Exploiting this vulnerability allows an attacker to circumvent the restrictions imposed by the specified security policies...

UBUNTU-CVE-2018-1160

Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsiopensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution...

Google Android Buffer Overflow Vulnerability (CNVD-2019-27580)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'impdparseparametricdrcinstructions' function of the impddrcstaticpayload.c file in Android version 9, which stems from a lack of...