The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or to...

The vulnerability of the eSupplier Connection component in the PeopleSoft Enterprise SCM application allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the eSupplierConnection component in the PeopleSoft Enterprise SCM application is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add,...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient input validation, which allows attackers to disclose protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

Cisco SD-WAN Software Privilege Escalation (cisco-sa-vepestd-8C3J9Vc)

According to its self-reported version, Cisco SD-WAN is affected by a privilege escalation vulnerability exists due to insufficient input validation. An authenticated, local attacker can exploit this by sending crafted options to a specific command, to gain root access to the system. TRUSTED...

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL Database Management System allows a hacker to trigger a service failure.

The vulnerability of the MySQL Server component relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using the MySQL network protocol...

The vulnerability of the Logging component of the Oracle Hospitality OPERA 5 Property Services software solution allows a hacker to gain full control over the application.

The vulnerability of the Logging component in the Oracle Hospitality OPERA 5 Property Services software solution relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain full control over the application through the HTTP network protocol...

The vulnerability of the Shared Services component of the Hyperion Lifecycle Management system allows a attacker to access data for modification, addition, or deletion.

The vulnerability of the Shared Services component of the Hyperion Lifecycle Management system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP network protocol...

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms allows attackers to gain unauthorized access to protected information.

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2020-4799 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Description: The issue is related to insufficie...

PT-2020-4800 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to insufficie...

PT-2020-4885 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint, which can be exploited by a remote attacker to disclose protected information. Recommendations: A...

The vulnerability of the Libraries component of the Java SE software platform allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Libraries component of the Java SE software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data...

Cisco Integrated Management Controller Command Injection Vulnerability (CNVD-2020-70859)

The Cisco Integrated Management Controller IMC is a baseboard management controller that provides embedded server management for Cisco UCS C-Series rackmount servers and Cisco S-Series storage servers. A command injection vulnerability exists in the web UI of Cisco Integrated Management Controlle...

The vulnerability of the User Interface component of the Oracle Trade Management application, a part of the Oracle E-Business Suite, allows an attacker to modify, add, or delete data.

The vulnerability of the User Interface component of the Oracle Trade Management application, a part of the Oracle E-Business Suite, relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to modify, add, or delete data using the HTTP network protoc...

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module. The Oracle E-Business Suite technical foundation for automating business operations allows attackers to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or to modify, add, or...

Cisco SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted options to a specifi...

PT-2020-4642 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software affected versions not specified Description: The issue is related to the command-line interface CLI of Cisco SD-WAN Software, where insufficient input validation for specific commands could allow an authenticated, local...

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows attackers to compromise the integrity of the protected information.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Server Board M10JNP2SB server software, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the Server Board M10JNP2SB server software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-3459

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this...