CVE-2020-14607

CVE-2020-14607 affects Oracle Fusion Middleware MapViewer Tile Server (versions 12.2.1.3.0 and 12.2.1.4.0). The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise MapViewer; exploitation is described as easily exploitable and may lead to unauthorized read...

CVE-2020-14528

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

PT-2020-3443 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.20 and prior Description: The issue is related to insufficient access control in the Server: DML component of Oracle MySQL Server, allowing a remote attacker to cause a denial of service using the MySQL...

SpryMedia DataTables SQL Injection Vulnerability (CNVD-2021-17760)

SpryMedia DataTables is a British SpryMedia company for the conversion of HTML tables into dynamic tables of JavaScript library . A SQL injection vulnerability exists in the 'search' parameter of the Records.php file in SpryMedia DataTables. A remote attacker can exploit this vulnerability to add...

SpryMedia DataTables SQL Injection Vulnerability (CNVD-2021-17761)

SpryMedia DataTables is a British SpryMedia company for the conversion of HTML tables into dynamic tables of JavaScript library . A SQL injection vulnerability exists in the 'order' and 'column' parameters of the Records.php file in SpryMedia DataTables. A remote attacker can exploit this...

rauLink Software Domotica Web 2.0 SQL Injection Authentication Bypass

Summary Smart home automation software. Description The application suffers from an SQL Injection vulnerability. Input passed through 'usuario' POST parameter in registraUsuario is not properly sanitised before being returned to the user or used in SQL queries. This can be exploited to manipulate...

Microsoft Windows Kernel Elevation of Privilege (CVE-2020-0986)

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs, view, change, or delete data, or create ne...

Windows Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations. To exploit the vulnerability, an attacker would require unprivileged execution on the victim system. After successfully exploiting the vulnerability, an...

Vulnerability of the Server component: DML of the MySQL database management system client, which allows attackers to cause service interruptions.

The vulnerability of the Server component: The DML of the MySQL database management system’s client is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

A brief history of video game saves and data modification

Games consoles and handhelds have always been an interesting battleground for hacking activities. The homebrew scene for using hardware in interesting ways has a long and varied history, especially where porting games to run on different platforms is concerned. Tampering with games while playing...

Oracle WebCenter Content Unspecified Vulnerability (April 2018 CPU)

The version of Oracle WebCenter Content running on the remote host is affected by a vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. An easy to exploit...

CVE-2020-12257

rConfig 3.9.4 is vulnerable to cross-site request forgery CSRF because it lacks implementation of CSRF protection such as a CSRF token. An attacker can leverage this vulnerability by creating a form add a user, delete a user, or edit a user...

Concrete CMS: Time-base SQL Injection in Search Users

Description ===================== I've identified an SQL injection vulnerability in the website labs.data.gov that affects the endpoint /index.php/dashboard/users/search and can be exploited via the fSearchDefaultSortDirection param. I didn't extract any data from the database, I've confirmed the...

The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, ...

SAP Adaptive Server Enterprise Information Disclosure Vulnerability (CNVD-2020-29753)

SAP Adaptive Server Enterprise is a relational database server from SAP. An information disclosure vulnerability exists in SAP Adaptive Server Enterprise. An attacker could exploit this vulnerability to obtain account credentials, manipulate system data, and impact system availability...

Vulnerabilities fixed in binutils

Vulnerabilities have been fixed in binutils. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to system data Ubuntu classifies all vulnerabilities...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2020-23468)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: DML component of MySQL Server 5.6.47 and earlier, 5.7.29 and earlier, and 8.0.19 and earlier in Oracle...

GaussDB: Enable DML Audit

If AUDITLEVEL is set to 4, Data Manipulation Language DML operations, such as INSERT, UPDATE, DELETE, and SELECT are audited. DML is used to manage table data. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2020-2945

Vulnerability in the Oracle Financial Services Deposit Insurance Calculations for Liquidity Risk Management product of Oracle Financial Services Applications component: User Interfaces. Supported versions that are affected are 8.0.7 and 8.0.8. Easily exploitable vulnerability allows low privilege...

CVE-2020-2946

Vulnerability in the Application Performance Management product of Oracle Enterprise Manager component: EM Request Monitoring. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...