unbound: command injection with data coming from a specially crafted IPSECKEY answer

A shell command injection vulnerability was discovered in the way unbound handles DNS queries for systems with a public key used for IPsec. When ipsecmod is enabled, a malicious DNS server could send a DNS reply which would be used during a following DNS query to execute shell commands with the...

Cybozu Garoon License Issue Vulnerability (CNVD-2020-26659)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon versions 4.0.0 to 4.10.3. A remote attacker can...

OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network acce...

The vulnerability of the InnoDB component of the MySQL database management system allows attackers to modify data or cause service failures.

The vulnerability of the InnoDB component in the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify data or cause service failures by using specially crafted network packets...

Vulnerability of the Security component: The MySQL database management system audit mechanism allows attackers to modify data or cause service failures.

Vulnerability of the Security component: Audits of MySQL database management systems are related to deficiencies in access control. Exploitation of this vulnerability can allow a malicious actor to modify data or cause service failures by using specially crafted network packets...

Vulnerability of the Server component: Security: Privileges of the MySQL database management system, allowing attackers to modify data or cause partial service interruptions.

The vulnerability of the Server component, specifically in the Security section related to MySQL database management system privileges, is associated with deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify data or cause partial service interruptions...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Absence Management

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Oracle. The product provides human capital management, financial management, supplier relationship management and other functions. An unspecified vulnerability exists in Oracle PeopleSoft Products...

Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Loan Loss Forecasting and Provisioning

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Loan Loss Forecasting and...

Oracle E-Business Suite Marketing Encyclopedia System Unauthorized Operation Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing Encyclopedia System is...

Oracle Financial Services Applications FLEXCUBE Core Banking Unauthorized Operation Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. A security vulnerability exists in the Transaction Processing component of FLEXCUBE Core Banking version 4.0 in Oracle...

Microsoft Windows Media Foundation Buffer Overflow Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Media Foundation is one of the multimedia application libraries. A buffer overflow...

Unspecified Vulnerability in Oracle E-Business Suite Universal Work Queue

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Universal Work Queue is one of the tools that c...

Unspecified Vulnerability in Oracle Financial Services Applications Insurance Accounting Analyzer

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Insurance Accounting Analyzer, which can be...

Oracle Financial Services Applications Financial Services Hedge Management and IFRS Valuations Unauthorized Operation Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. A security vulnerability exists in the User Interface component of Financial Services Hedge Management and IFRS Valuations...

Microsoft Windows Media Foundation Buffer Overflow Vulnerability (CNVD-2020-26242)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Media Foundation is one of the multimedia application libraries. A buffer overflow...

Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Liquidity Risk Measurement and Management

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Liquidity Risk Measurement...

Oracle MySQL Server Denial of Service Attack Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server 5.7.29 and earlier versions and the InnoDB component of Oracle MySQL 8.0.19 and earlier versions...

Unspecified Vulnerability in Oracle MySQL Connectors

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Connectors is one of the drivers for connecting applications that use MySQL. A security vulnerability exists in the MySQL Connectors 8.0.14 and earlier and Connector/J component of Oracle MySQL 5.1....

Oracle E-Business Suite Email Center Unauthorized Operation Vulnerability (CNVD-2020-23751)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Email Center is one of the e-mail component. A securi...

Unspecified Vulnerability in Oracle Java SE (CNVD-2020-72710)

Oracle Java SE is a U.S. Oracle Oracle for the development and deployment of desktop, server and embedded devices and real-time environments in Java applications. A security vulnerability exists in the JSSE component in Oracle Java SE versions 11.0.6 and 14. An attacker could exploit the...