CVE-2020-13186

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link...

CVE-2020-13186

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link...

Cross site request forgery (csrf)

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link...

Teradici Cloud Access Connector Cross-Site Request Forgery Vulnerability

A cross-site request forgery vulnerability exists in Teradici Cloud Access Connector v31 and earlier, which can be exploited by an attacker to modify data when a user clicks a malicious link...

The vulnerability of the RAS subsystem components of the Sun ZFS Storage Appliance Kit allows a perpetrator to gain access to modify, add, or delete data, or to gain unauthorized access to protected information.

The vulnerability of the RAS subsystem components of the Sun ZFS Storage Appliance Kit is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or gain unauthorized access to protected information...

The vulnerability of the Unified Audit component of the Oracle Database Server system allows a perpetrator to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.

The vulnerability of the Unified Audit component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized access to protected...

The vulnerability of the components of Web Services in Oracle WebLogic Server’s application servers allows attackers to gain access to modify, add, or delete data.

The vulnerability of the components of Oracle WebLogic Server’s application services is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol over the network...

The vulnerability of the Report component of the Oracle Hospitality Reporting and Analytics application allows a perpetrator to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.

The vulnerability of the Report component of the Oracle Hospitality Reporting and Analytics application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to obtain unauthorized access to protected...

The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform allows a perpetrator to modify data or gain unauthorized access to the device.

The vulnerability of Oracle Marketing’s Marketing Administration component exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to modify data or gain unauthorized access to the device through HTTP requests...

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to modify data or gain unauthorized access to the device.

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to remotely modify data or gain unauthorized access to the device...

USN-4713-2 linux, linux-gke-5.0, linux-gke-5.3, linux-hwe, linux-raspi2-5.3 vulnerability

It was discovered that the LIO SCSI target implementation in the Linux kernel performed insufficient identifier checking in certain XCOPY requests. An attacker with access to at least one LUN in a multiple backstore environment could use this to expose sensitive information or modify data...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to modify, add, or delete data, or to obtain unauthorized access to protect...

The vulnerability of the APIs of the Oracle Installed Base information storage center component of the Oracle E-Business Suite, which exists due to insufficient verification of input data, allows a perpetrator to modify the data.

The vulnerability of the APIs of the Oracle Installed Base information storage center component in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to modify, add, or...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows attackers to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data, or cause service interruptions using the MySQL protocol...

GNU Binutils 后置链接漏洞

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide linkers, assemblers, and other tools for target files and archives. An...

The vulnerability of the Analytics Web Dashboard component of the Oracle Business Intelligence Enterprise Edition software allows a perpetrator to access, modify, add, or delete data, or gain unauthorized access to protected information.

The vulnerability of the Analytics Web Dashboard component of the Oracle Business Intelligence Enterprise Edition software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data, or to obtain...

The vulnerability of the UI Servlet component of the Oracle Configurator allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the UI Servlet component of the Oracle Configurator exists due to insufficient validation of input data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information or to modify, add, or delete data using...

USN-4713-1 linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerability

It was discovered that the LIO SCSI target implementation in the Linux kernel performed insufficient identifier checking in certain XCOPY requests. An attacker with access to at least one LUN in a multiple backstore environment could use this to expose sensitive information or modify data...

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a malicious actor to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Shopping Cart component in the Oracle iStore system for creating, managing, and personalizing e-commerce stores exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the CRM User Management Framework component of Oracle Common Applications allows a perpetrator to gain unauthorized access to protected information or to have read, add, or delete privileges over data.

The vulnerability of the CRM User Management Framework component of Oracle Common Applications is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or...