3D CSS Component Spoofing

The vulnerability of the 3D CSS component in the Firefox browser relates to the display of content outside the viewport of the web page. Exploiting this vulnerability can allow a malicious actor to perform spoofing attacks remotely...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Google Android System Information Disclosure Vulnerability (CNVD-2021-29043)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. No details of the vulnerability are provided at this ti...

Google Android System Remote Code Execution Vulnerability (CNVD-2021-17304)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. An attacker can exploit this vulnerability to achieve...

Win32k Privilege Escalation

The vulnerability of the Win32k component in Microsoft Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Apple macOS Arbitrary File Read Vulnerability

Apple macOS is a specialized operating system developed by Apple for Mac computers. An arbitrary file read vulnerability exists in Apple macOS, which arises from an application not properly applying security restrictions within the APFS component of macOS. A local user can read arbitrary files on...

MySQL Server DoS

The vulnerability of the MySQL Server database management system’s stored procedures exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to deny service to the system remotely...

Oracle VM VirtualBox Full Control

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Letters component Oracle Argus Safety Unauthorized Access

The vulnerability of the Letters component of the Oracle Argus Safety platform is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

Oracle VM VirtualBox DoS

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

Oracle VM VirtualBox DoS

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Oracle VM VirtualBox DoS

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2021-04768)

Oracle MySQL is an open source relational database management system.MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Security: Roles component of Oracle MySQL Server 8.0.19 and...

Oracle MySQL Server 安全漏洞

Oracle MySQL is an open source relational database management system.MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Security: Privileges component in Oracle MySQL Server 8.0.20 an...

Core server component Code Execution

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the IIOP protocol remotely...

CVE-2020-17010

Win32k Elevation of Privilege Vulnerability...

Oracle Hospitality OPERA Logging Component Unauthorized Access Data Modification

The vulnerability of the Logging component in the Oracle Hospitality OPERA 5 Property Services software solution relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or to modify, add, or delet...

OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-59217)

Oracle VM VirtualBox is a powerful cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.16. An attacker can exploit this vulnerability to gain unauthorized access to critical data or full access...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59059)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Logging component of Oracle MySQL Server 8.0.21 and earlier. An attacker could exploit this...