PT-2020-4799 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Description: The issue is related to insufficie...

Cisco Integrated Management Controller Command Injection Vulnerability (CNVD-2020-70859)

The Cisco Integrated Management Controller IMC is a baseboard management controller that provides embedded server management for Cisco UCS C-Series rackmount servers and Cisco S-Series storage servers. A command injection vulnerability exists in the web UI of Cisco Integrated Management Controlle...

The vulnerability of the User Interface component of the Oracle Trade Management application, a part of the Oracle E-Business Suite, allows an attacker to modify, add, or delete data.

The vulnerability of the User Interface component of the Oracle Trade Management application, a part of the Oracle E-Business Suite, relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to modify, add, or delete data using the HTTP network protoc...

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module. The Oracle E-Business Suite technical foundation for automating business operations allows attackers to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or to modify, add, or...

Cisco SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by providing crafted options to a specifi...

PT-2020-4642 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software affected versions not specified Description: The issue is related to the command-line interface CLI of Cisco SD-WAN Software, where insufficient input validation for specific commands could allow an authenticated, local...

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows attackers to compromise the integrity of the protected information.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Server Board M10JNP2SB server software, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the Server Board M10JNP2SB server software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-3459

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this...

PT-2020-4570

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 14.1.1.0.0 Description The issue is related to insufficient input validation in the Console component of Oracle WebLogic Server, allowing a remote attacker to gain full control over the...

PT-2020-4487

Name of the Vulnerable Software and Affected Versions Java SE versions 11.0.8 through 15 Description The issue is related to insufficient input validation in the Libraries component of Java SE, allowing an unauthenticated attacker with network access via multiple protocols to compromise Java SE...

PT-2020-4535 · Oracle +10 · Mysql Server +9

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.31 and prior MySQL Server versions 8.0.21 and prior Description: The issue is related to insufficient input validation in the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with...

PT-2020-4472 · Oracle +10 · Mysql Server +9

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.6.49 and prior MySQL Server versions 5.7.31 and prior MySQL Server versions 8.0.21 and prior Description: The issue is related to insufficient input validation in the MySQL Server product, specifically in the Server: F...

PT-2020-4502

Name of the Vulnerable Software and Affected Versions Java SE versions 7u271, 8u261, 11.0.8, and 15 Java SE Embedded version 8u261 Description The issue is related to insufficient input validation in the Libraries component of Java SE and Java SE Embedded, allowing an unauthenticated attacker wit...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Remote Desktop Services RDS for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the user interface of Cisco Webex Meetings Server and Cisco Webex Meetings software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software user interfaces for Cisco Webex Meetings Server and Cisco Webex Meetings is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2020-5151 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on PTX/QFX Series versions prior to 17.2X75-D105 Juniper Networks Junos OS on PTX/QFX Series versions prior to 18.1R3-S11 Juniper Networks Junos OS on PTX/QFX Series versions prior to 18.2R3-S5 Juniper Networks Junos...

PT-2020-4250 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Remote Desktop Protocol RDP affected versions not specified Description: An information disclosure issue exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. This...

CVE-2020-9238

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device...

Input validation

A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device. The vulnerability is due to insufficient input validation during authentication. An attacker could exploit this vulnerability by entering...