Oracle Marketing Unauthorized Access Vulnerability (CNVD-2020-27002)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the...

Unspecified Vulnerability in Oracle Document Management and Collaboration

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is seamlessly integrated with a management suite. Oracl...

Unspecified Vulnerability in Oracle Customer Interaction History (CNVD-2020-54688)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and other management software collection, is seamlessly integrated with a management suite. oracle Customer...

Default credentials

SAP Business Objects Business Intelligence Platform CMC, version 4.1, 4.2, shows cleartext password in the response, leading to Information Disclosure. It involves social engineering in order to gain access to system and If password is known, it would give administrative rights to the attacker to...

PT-2020-2546

Name of the Vulnerable Software and Affected Versions Java SE versions 11.0.6 and 14 Description The issue is related to insufficient access control in the JSSE component of Java SE, allowing an unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks can...

Community Input Validation Error Vulnerability

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management.Community is one of the plug-ins that support users to create albums and add photos. A security vulnerability exists in Community versi...

Huawei Taurus-AL00B Resource Management Error Vulnerability

The Huawei Taurus-AL00B is a smartphone from the Chinese company Huawei Huawei. A resource management error vulnerability exists in previous versions of Huawei Taurus-AL00B 10.0.0.203 C00E201R7P2. A local attacker could exploit the vulnerability to modify information and affect the usability of t...

Insulet Omnipod Insulin Management System Access Control Error Vulnerability

Insulet Omnipod Insulin Management System is an insulin management system from Insulet USA. An Access Control Error vulnerability exists in the Insulet Omnipod Insulin Management System, which arises from a failure of the wireless RF communication protocol to properly implement authentication or...

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to gain access and modify data.

The vulnerability of the Media Foundation component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain access to, modify, or delete data through a specially created document or a specially created web pag...

WordPress Plugin Custom Searchable Data System - Unauthenticated Data M]odification

Exploit Title: Wordpress Plugin Custom Searchable Data System - Unauthenticated Data modification Date: 13 March 2020 Exploit Author: Nawaf Alkeraithe Vendor Homepage: https://wordpress.org/plugins/custom-searchable-data-entry-system/ Software Link:...

Microsoft Windows Microsoft Windows Media Foundation Memory Corruption Vulnerability

Microsoft Windows is an operating system for personal devices from Microsoft, of which Media Foundation is a multimedia development library. A memory corruption vulnerability exists in Microsoft Windows Media Foundation, which arises from a program's failure to properly handle memory objects and...

HackerOne: Changes to data in a CVE request after draft via GraphQL query

Summary: Our team has conducted a number of studies tests in the field of CVE Request. We found several statuses of such requests Awaiting Publication, Pending HackerOne approval, Cancelled . At the time of creating the request , we can change the data. However, we noticed that we can 't change...

Custom Searchable Data Entry System <= 1.7.1 - Unauthenticated Data Modification and Deletion

The estimated 2,000+ sites running the plugin are vulnerable to Unauthenticated Data Modification and Deletion, including the potential to delete the entire contents of any table in a vulnerable site’s database...

GRANDIT Session Management Vulnerability

GRANDIT is a Web-based ERP Enterprise Resource Planning system from GRANDIT Japan. The system includes functions such as sales management, financial management and human resource management. A security vulnerability exists in GRANDIT, which stems from the program not properly managing sessions. A...

CVE-2020-2585

Vulnerability in the Java SE product of Oracle Java SE component: JavaFX. The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

Pagoda Linux Panel of Dongguan Baita Network Technology Co., Ltd. suffers from logic flaw vulnerability

Pagoda Linux Panel is the server management software to improve the efficiency of operation and maintenance, supports one-click LAMP/LNMP/cluster/monitoring/website/FTP/database/JAVA and more than 100 server management functions. Pagoda Linux Panel of Dongguan Beta Network Technology Co., Ltd...

ShopsN open source mall system has a logic flaw vulnerability

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd. an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system . ShopsN open source mall system has a logic flaw vulnerability . Attackers can...

IBM Emptoris Spend Analysis SQL Injection Vulnerability (CNVD-2020-13057)

IBM Emptoris Spend Analysis is a product within IBM's suite of procurement solutions for consolidating, cleansing and categorizing spend data from decentralized systems. A SQL injection vulnerability exists in IBM Emptoris Spend Analysis versions 10.1.3.x, 10.1.1.x, and 10.1.0.x. The vulnerabilit...

The vulnerability of the Message Display component of the Oracle Email Center software allows a malicious individual to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.

The vulnerability of the Message Display component of the Oracle Email Center messaging software is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to obtain unauthorized access to protected...

The vulnerability of the Message Display component of the Oracle Email Center software allows a malicious individual to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.

The vulnerability of the Message Display component in the Oracle Email Center software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information usin...