jackson-databind: Lacks certain xbean-reflect/JNDI blocking

A flaw was found in FasterXML jackson-databind in versions 2.0.0 through 2.9.10.2. A "gadget" exploit is possible due to a lack of a Java object being blocking from being deserialized. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabili...

jackson-databind: Serialization gadgets in ibatis-sqlmap

A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Cisco IOS Channel Input Validation

The vulnerability in the implementation of the channel between virtual machines of the Cisco IOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

Information Manager Console Data Compromise

The vulnerability of the Information Manager Console component of the Oracle Knowledge business application relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the integrity, confidentiality, and accessibility of protected information...

Oracle Java SE Libraries Component Data Compromise

The vulnerability of the Libraries component in Oracle Java SE and Oracle Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity, confidentiality, and accessibility of protected...

freerdp: Out-of-bounds write in interleaved.c

A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...

Grin has an unspecified vulnerability

Grin is an implementation of the MimbleWimble protocol. A security vulnerability exists in Grin versions prior to 3.1.0. An attacker could exploit the vulnerability to affect the availability of data...

CVE-2020-12439

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

Design/Logic Flaw

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

CVE-2020-12439

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

PT-2020-13113

Name of the Vulnerable Software and Affected Versions Grin versions prior to 3.1.0 Description The issue allows attackers to adversely affect the availability of data on a Mimblewimble blockchain. Recommendations For versions prior to 3.1.0, update to version 3.1.0 or later to resolve the issue...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-51464 )

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Google Chrome Information Disclosure

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-24429)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-23400)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle Access Control Error Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management. A security vulnerability exists in the Security component of Retail Store Inventory Management...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-51468 )

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-23058)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Parser component of MySQL Server 8.0.19 and earlier versions in Oracle MySQL. An attacker could exploi...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2020-23467)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server 8.0.18 and prior versions of Server: Security: Privileges component of Oracle MySQL. An attacker...