CVE-2020-10275

CVE-2020-10275 describes a weakness in REST API token generation where tokens are directly derived from publicly available default credentials for the web interface. With a given USERNAME and PASSWORD, the token is computed as base64(USERNAME:sha256(PASSWORD)). An attacker inside the network who ...

The vulnerability of the Application Framework component of the Cisco IOx software platform allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Application Framework component of the Cisco Iox software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data in the virtual environment...

Siemens LOGO! TDE service "NFSAccess" Delete Denial of Service Vulnerability

Summary An exploitable denial of service vulnerability exists in the TDE service functionality of Siemens LOGO! 1.82.02, 12/24RCE Version 0BA and 230RCE Version 0BA. A specially crafted network request can cause be used to delete critical system data resulting in a denial of service. An attacker...

The vulnerability of the JSE component of Oracle Java SE software allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the JSE component of Oracle Java SE software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized access to protected information...

GHSA-38F9-M297-6Q9G DoS via malicious record IDs in WatermelonDB

Impact Medium severity 5.9 https://www.first.org/cvss/calculator/3.0CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H A maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the database, generally...

CVE-2020-4035

In WatermelonDB NPM package "@nozbe/watermelondb" before versions 0.15.1 and 0.16.2, a maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the database, generally causing the app to become...

The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to access, modify, add, or delete data.

The vulnerability of the Console component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP network protocol...

CVE-2020-3184

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates...

Used Tesla Components Contain Personal Information

Used Tesla components, sold on eBay, still contain personal information, even after a factory reset. This is a decades-old problem. It's a problem with used hard drives. It's a problem with used photocopiers and printers. It will be a problem with IoT devices. It'll be a problem with everything,...

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows attackers to gain access to modify, add, or delete data, as well as to unauthorizedly access protected information.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing e-commerce stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to remotely gain access to modify, add, or...

The vulnerability of the Email Address list and Message Display components of the Oracle Email Center software, a business automation system within the Oracle E-Business Suite. This allows attackers to access, modify, add, or delete data, or gain unauthorized access to protected information.

The vulnerability of the Email Address list and Message Display components of the Oracle Email Center software, a messaging automation system within the Oracle E-Business Suite, is related to lack of access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete...

The vulnerability of the User Interface component in Oracle iSupport, which allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the User Interface component in Oracle iSupport is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the Absence Recording component in the Oracle Human Resources HR management software allows a violator to gain access to modify, add, or delete data.

The vulnerability of the Absence Recording component in the Oracle Human Resources HR management software is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the Workflow Notification Mailer component of the Oracle Workflow software, a system for automating business processes within the Oracle E-Business Suite. This component allows an intruder to access, modify, add, or delete data.

The vulnerability of the Workflow Notification Mailer component of the Oracle Workflow software in the Oracle E-Business Suite relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Balance Sheet Planning

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Balance Sheet Planning, whi...

CVE-2020-2891

Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications component: User Interfaces. The supported version that is affected is 8.0.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Unspecified Vulnerability in Oracle E-Business Suite Depot Repair

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. An unspecified vulnerability exists in Oracle...

Oracle Marketing Unauthorized Access Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the...

GDPR: An impact around the world

A little more than one month after the European Union enacted the General Data Protection Regulation GDPR to extend new data privacy rights to its people, the governor of California signed a separate, sweeping data protection law that borrowed several ideas from GDPR, sparking a torch in a...

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to gain access and modify data.

The vulnerability of the Media Foundation component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain access to, modify, or delete data through a specially created document or a specially created web pag...