PT-2020-4517

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.21 and prior Description The issue is related to insufficient input validation in the Server: Optimizer component of MySQL Server, allowing a high-privileged attacker with network access via multiple protocols to...

PT-2020-4530

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.21 and prior Description The issue is related to insufficient input validation in the MySQL Server product, specifically in the Server: DML component. This allows a high-privileged attacker with network access via...

PT-2020-4402

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1 Description: The issue is related to insufficient input validation in the Database Vault component of Oracle Database Server. It allows a high-privileged attacker with Create Public...

PT-2020-4540

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.21 and prior Description The issue is related to insufficient input validation in the Server: Optimizer component of the MySQL Server product. It allows an attacker with network access via multiple protocols to...

PT-2020-4522

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.21 and prior Description The issue is related to insufficient input validation in the MySQL Server component, specifically in the Optimizer subsystem. This can be exploited by a remote attacker to cause a denial of...

PT-2020-4528

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.21 and prior Description The issue is related to insufficient input validation in the Server: FTS component of the MySQL Server product. It allows a high-privileged attacker with network access via multiple protocols ...

PT-2020-4837

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.21 and prior Description: The issue is related to insufficient input validation in the Server: X Plugin component of MySQL Server, allowing a highly privileged attacker with network access via multiple protocols to...

PT-2020-4840

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.21 and prior Description: The issue is related to insufficient input validation in the Server: Logging component of MySQL Server, allowing a remote attacker to cause a denial of service. A high-privileged attacker wi...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Remote Desktop Services RDS for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2020-4395

Name of the Vulnerable Software and Affected Versions: VMware Horizon Client for Windows versions 5.x before 5.5.0 Description: The issue is related to a denial-of-service condition due to a file system access control problem during installation. It may allow an attacker to overwrite certain admi...

The vulnerability of the user interface of Cisco Webex Meetings Server and Cisco Webex Meetings software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software user interfaces for Cisco Webex Meetings Server and Cisco Webex Meetings is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2020-5151 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on PTX/QFX Series versions prior to 17.2X75-D105 Juniper Networks Junos OS on PTX/QFX Series versions prior to 18.1R3-S11 Juniper Networks Junos OS on PTX/QFX Series versions prior to 18.2R3-S5 Juniper Networks Junos...

PT-2020-4250 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Remote Desktop Protocol RDP affected versions not specified Description: An information disclosure issue exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. This...

CVE-2020-9238

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device...

PT-2020-5074

Name of the Vulnerable Software and Affected Versions Cisco StarOS operating system for Cisco ASR 5000 Series Routers affected versions not specified Description The issue is related to insufficient input validation of CLI commands, which could allow an authenticated, local attacker to elevate...

PT-2020-5128

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA versions affected versions not specified Description The issue is related to errors in checking incoming URLs, which could allow a remote attacker to bypass URL filters. This is due to insufficient input...

Input validation

A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device. The vulnerability is due to insufficient input validation during authentication. An attacker could exploit this vulnerability by entering...

PT-2020-5118

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device. The issue is due t...

Security Advisory - Insufficient Input Validation Vulnerability in Some Huawei Phones

There is an insufficient input validation vulnerability in some Huawei products. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to access and modify the memory of the device by doing a series of operations. Successful exploit may cause the service...

The vulnerability of the ASP.NET components of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient input validation, allowing attackers to execute arbitrary code.

The vulnerability of ASP.NET package components in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code through a...