1175 matches found
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-41754)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server 8.0.20 and prior versions of Server: Security: Privileges component of Oracle MySQL. An attacker...
Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40800)
Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...
Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40794)
Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...
Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40793)
Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...
Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40799)
Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...
Unspecified Vulnerability in Oracle GraalVM Enterprise Edition JVMCI Component
Oracle GraalVM is the United States Oracle Oracle company's set of instant compiler written in the Java language. The product supports a variety of programming languages and execution modes.GraalVM Enterprise Edition is the enterprise version of GraalVM. A security hole exists in the Oracle Graal...
Unspecified Vulnerability in Oracle GoldenGate (CNVD-2020-43707)
OOracle GoldenGate is a comprehensive package for real-time data integration and replication in IT environments from Oracle USA. The product supports real-time data integration, transactional change data capture, data services, transformation and validation capabilities. A security vulnerability...
The vulnerability of the gf_text_get_utf8_line function in the multimedia platform GPAC, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gftextgetutf8line function on the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the gf_sm_load_init function on the GPAC multimedia platform, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gfsmloadinit function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the multimedia platform GPAC, related to reading beyond the buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the multimedia platform GPAC is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
jackson-databind: Lacks certain xbean-reflect/JNDI blocking
A flaw was found in FasterXML jackson-databind in versions 2.0.0 through 2.9.10.2. A "gadget" exploit is possible due to a lack of a Java object being blocking from being deserialized. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabili...
jackson-databind: Serialization gadgets in ibatis-sqlmap
A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
The vulnerability in the implementation of the channel between virtual machines of the Cisco IOS operating system arises from insufficient validation of input data. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability in the implementation of the channel between virtual machines of the Cisco IOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the Libraries component of Oracle Java SE and Oracle Java SE Embedded software platforms allows attackers to compromise the integrity, confidentiality, and accessibility of protected information.
The vulnerability of the Libraries component in Oracle Java SE and Oracle Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity, confidentiality, and accessibility of protected...
The vulnerability of the Information Manager Console component of the Oracle Knowledge business application, which allows a perpetrator to compromise the integrity, confidentiality, and accessibility of protected information.
The vulnerability of the Information Manager Console component of the Oracle Knowledge business application relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the integrity, confidentiality, and accessibility of protected information...
freerdp: Out-of-bounds write in interleaved.c
A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...
Grin has an unspecified vulnerability
Grin is an implementation of the MimbleWimble protocol. A security vulnerability exists in Grin versions prior to 3.1.0. An attacker could exploit the vulnerability to affect the availability of data...
CVE-2020-12439
Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...
Design/Logic Flaw
Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...
CVE-2020-12439
Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...