9552 matches found
Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26540)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the MySQL Server component of Oracle MySQL, version 5.6.44 and earlier, and the Security:...
Oracle Database Server Application Express Component Access Control Error Vulnerability
Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...
Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26525)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the MySQL Server component of Oracle MySQL, version 5.7.26 and earlier, and the InnoDB...
Oracle BI Publisher Component Access Control Error Vulnerability (CNVD-2019-29188)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...
Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27774)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...
Oracle Fusion Middleware Identity Manager Component Access Control Error Vulnerability
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Identity Manager is one of the enterprise identity management system components. A security...
Oracle E-Business Suite Component Access Control Error Vulnerability
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. field Service formerly known as...
Oracle Database Server ODBC Driver Component Access Control Error Vulnerability
Oracle Database Server is the United States Oracle Oracle company's set of relational database management system. The database management system provides data management, distributed processing and other functions.ODBC Driver is one of the open database connection ODBC driver component. A securit...
Oracle Java SE and Java SE Embedded Access Control Error Vulnerability (CNVD-2019-26753)
Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...
Oracle MySQL Server Component Input Validation Error Vulnerability (CNVD-2019-26675)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. Input validation error vulnerability in the InnoDB subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.16 and earlier. An attacke...
Oracle Enterprise Manager Products Suite Enterprise Manager Ops Center Component Access Control Error Vulnerability
Oracle Enterprise Manager Products Suite is a set of Oracle's on-premise management platform. Enterprise Manager Ops Center is one of the enterprise data center monitoring and management components. A security vulnerability exists in the Networking subcomponent of the Enterprise Manager Ops Cente...
Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28429)
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software, the software provides customer relationship management, service management, financial management and other functions. The software provides customer...
Oracle Hyperion Planning Component Access Control Error Vulnerability
Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closure, report production and other functions. Hyperion Planning is one of the planning task component. A security vulnerability exists in the Security subcomponen...
The vulnerability of the daemon/gvfsbackendadmin.c component of the GVFS subsystem in GNOME desktop environments on Linux operating systems allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.
The vulnerability of the daemon/gvfsbackendadmin.c component in the GVFS subsystem of GNOME desktop environments on Linux operating systems arises from the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to compromise...
The vulnerability of the twisted.web network framework’s Twisted component allows attackers to compromise the confidentiality and integrity of protected information.
The vulnerability of the twisted.web network framework exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of protected information by introducing invalid characters like CRLF...
The vulnerability of Cisco Email Security Appliance’s security systems, which stems from insufficient validation of input data, allows attackers to bypass the configured content filters and compromise the integrity of the protected information.
The vulnerability of Cisco Email Security Appliance’s security systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the configured content filters and compromise the integrity of the protected information...
Validation Bypass
Apache Kafka is vulnerable to Validation Bypass. An authenticated attacker with Write Permission can manually craft a Produce Request which bypasses ACL validation, affecting data integrity...
The vulnerability of clients under comprehensive network endpoint protection from Check Point Endpoint Security, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Check Point Endpoint Security’s comprehensive network endpoint protection lies in its lack of access control mechanisms. Exploiting this vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information through a specially...
jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921)
A flaw was found in the Jenkins Workflow Remote Loader plugin. An unsafe whitelist entry was made that allowed invoking arbitrary methods and bypassing sandbox protection. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
