Vulnerabilities in the initialization and service management of Linux Systemd, related to incorrect default permissions, allow attackers to access confidential data, compromise its integrity, and cause service failures.

Vulnerabilities in the initialization and service management of Linux’s systemd are related to incorrect standard permissions for low-security administrators. Exploiting these vulnerabilities can allow remote attackers to access sensitive data, compromise its integrity, and cause service failures...

The vulnerability of AppX Deployment Extensions in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of AppX Deployment Extensions in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

USN-4470-1 sane-backends vulnerabilities

Kritphong Mongkhonvanit discovered that sane-backends incorrectly handled certain packets. A remote attacker could possibly use this issue to obtain sensitive memory information. This issue only affected Ubuntu 16.04 LTS. CVE-2017-6318 It was discovered that sane-backends incorrectly handled...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS due to flaws...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS due to flaws in Information Schema...

Denial Of Service (DoS)

rh-mysql80-mysql is vulnerable to denial of service DoS due to flaws in Optimizer...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS due to flaws in managing Privileges...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS due to flaws in managing Privileges...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS due to flaws in managing Privileges...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS due to flaws in optimizer...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS due to flaws in managing Privileges...

The vulnerability of the Java SE product’s software platform component, Oracle Java SE, is related to insufficient validation of input data. This allows a malicious actor to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the Hotspot component in Oracle Java SE software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or delete data using the HTTP protocol...

USN-4458-1 apache2 vulnerabilities

Fabrice Perez discovered that the Apache modrewrite module incorrectly handled certain redirects. A remote attacker could possibly use this issue to perform redirects to an unexpected URL. CVE-2020-1927 Chamal De Silva discovered that the Apache modproxyftp module incorrectly handled memory when...

Amazon Fixes Alexa Glitch That Could Have Divulged Personal Data

UPDATE Vulnerabilities in Amazon’s Alexa virtual assistant platform could allow attackers to access users’ personal information, like home addresses – simply by persuading them to click on a malicious link. Researchers with Check Point found several web application flaws on Amazon Alexa subdomain...

Citrix Warns of Critical Flaws in XenMobile Server

Citrix is urging users to immediately patch a pair of critical flaws in its flagship mobile device management software. If exploited, the flaws could allow remote, unauthorized attackers to access domain account credentials – ultimately opening the door to a treasure trove of corporate data,...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service failures using the MySQL protocol...

The vulnerability of the Composer component of the Oracle WebCenter Portal, which allows a hacker to gain access to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the Composer component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data, or to cause service interruptions using the HTTP protocol...

A software tool for centralized management of the lifecycle of Red Hat Satellite products. This tool is related to access control deficiencies, allowing an intruder to gain full control over the application.

The software for centralized management of the life cycle of Red Hat Satellite products is associated with deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain full control over the application...

The vulnerability of the Tile Server component of the Oracle Fusion Middleware MapViewer software allows a intruder to gain access to modify, add, or delete data.

The vulnerability of the Tile Server component of the Oracle Fusion Middleware MapViewer software relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the Query component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain read, modify, add, or delete access to data.

The vulnerability of the Query component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or delete data using th...