PT-2020-3242 · Oracle · Oracle Database

Name of the Vulnerable Software and Affected Versions: Oracle Database - Enterprise Edition versions 12.1.0.2, 12.2.0.1, 18c, and 19c Description: The issue exists due to insufficient input validation in the Oracle Database - Enterprise Edition component of Oracle Database Server. This allows a...

UBUNTU-CVE-2020-14593

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

PT-2020-3384 · Mysql Server +7 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.20 and prior Description: The issue is related to insufficient input validation in the Server: Security: Roles component of MySQL Server, allowing a remote attacker to gain access to modify, add, or delete data and...

PT-2020-3454

Name of the Vulnerable Software and Affected Versions Java SE versions 7u261, 8u251, 11.0.7, 14.0.1 Java SE Embedded version 8u251 Description The issue is related to the JAXP component and is caused by inadequate access control. It allows an unauthenticated attacker with network access via...

PT-2020-3376 · Mysql Server +7 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.20 and prior Description: The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a hang or...

PT-2020-3598

Name of the Vulnerable Software and Affected Versions Java SE versions 8u251, 11.0.7, and 14.0.1 Java SE Embedded version 8u251 Description The issue is related to insufficient input validation in the Libraries component of Oracle Java SE and Java SE Embedded. It allows an unauthenticated attacke...

UBUNTU-CVE-2020-14573

Vulnerability in the Java SE product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks o...

CVE-2020-5582

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors...

The vulnerability of the web interface of D-Link DIR-865L router’s microprogramming software allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the web interface of D-Link DIR-865L router software is related to the lack of protection against Cross-Site Request Forgery CSRF attacks. Exploiting this vulnerability allows a malicious actor to gain access to modify, add, or delete data...

CVE-2019-4650

IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170961...

The vulnerability of the Windows operating system’s kernel, related to errors in memory object handling, allows an attacker to increase their privileges and gain access to modify, add, or delete data.

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain access to modify, add, or delete data through a specially created application...

Guangzhou Shuangqi Network Technology Co., Ltd. 5y Learning Platform Existing Override Vulnerability

Guangzhou Shuangqi Network Technology Co., Ltd. was founded in 2015, and its business scope includes vocational skills training, research and development of network technology; computer technology development and so on. Guangzhou Shuangqi Network Technology Co. 5y learning platform has an...

RUSTSEC-2020-0029 Allows viewing and modifying arbitrary structs as bytes

Affected versions of rgb crate allow viewing and modifying data of any type T wrapped in RGB as bytes, and do not correctly constrain RGB and other wrapper structures to the types for which it is safe to do so. Safety violation possible for a type wrapped in RGB and similar wrapper structures: If...

Multiple Rockwell Automation Products Input Validation Error Vulnerability

Rockwell Automation RSLinx Classic is an industrial communications solution.Rockwell Automation RSLinx Classic is an industrial communications solution.Rockwell Automation FactoryTalk Linx is an industrial communications solution.Rockwell Automation ControlFLASH is a firmware update...

The vulnerability of the Application Framework component of the Cisco IOx software platform allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Application Framework component of the Cisco Iox software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data in the virtual environment...

The vulnerability of the JSE component of Oracle Java SE software allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the JSE component of Oracle Java SE software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized access to protected information...

The vulnerability of the Lightweight HTTP Server component in Oracle Java SE and Oracle Java SE Embedded software platforms allows attackers to modify, add, or delete data, or gain unauthorized access to protected information.

The vulnerability of the Lightweight HTTP Server component in Oracle Java SE and Oracle Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or gain unauthorized access to...

CVE-2020-5299

In OctoberCMS october/october composer package versions from 1.0.319 and before 1.0.466, any users with the ability to modify any data that could eventually be exported as a CSV file from the ImportExportController could potentially introduce a CSV injection into the data to cause the generated C...

CVE-2020-4035 DoS or local data modification via malicious record IDs in WatermelonDB

In WatermelonDB NPM package "@nozbe/watermelondb" before versions 0.15.1 and 0.16.2, a maliciously crafted record ID can exploit a SQL Injection vulnerability in iOS adapter implementation and cause the app to delete all or selected records from the database, generally causing the app to become...

The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to access, modify, add, or delete data.

The vulnerability of the Console component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP network protocol...