The vulnerability of the Libraries component in Oracle Java SE and Oracle Java SE Embedded software platforms allows a attacker to cause a service failure.

The vulnerability of the Libraries component in Oracle Java SE and Oracle Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Rich Text Editor component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Rich Text Editor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or to modify...

PT-2020-3973 · Microsoft · Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Microsoft Hyper-V affected versions not specified Description: A denial of service issue exists due to insufficient input validation in Microsoft Hyper-V. This can be exploited by an attacker with a privileged account on a guest operating...

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...

Input validation

A vulnerability in the Device Manager application of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to inject arbitrary commands on the affected device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

The vulnerability of the Microsoft .NET Bond software lies in the insufficient validation of input data, which allows attackers to trigger service failures.

The vulnerability of the Microsoft .NET Bond software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Web Services component of the Oracle WebLogic Server application server allows a perpetrator to gain access to confidential information.

The vulnerability of the Web Services component of Oracle WebLogic Server servers exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential information using IIOP and T3 protocols...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Mobile Expenses Admin Utilities component of the Oracle Internet Expenses financial management application allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Mobile Expenses Admin Utilities component of the Oracle Internet Expenses application relates to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Segment component in the Oracle Retail Customer Management and Segmentation software application allows a hacker to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Segment component in Oracle Retail Customer Management and Segmentation Foundation software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to modify, add, or delete data, or gain unauthorized access...

PT-2020-3331 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.20 and prior Description: The issue is related to insufficient input validation in the Server: Security: Privileges component of Oracle MySQL, allowing a high-privileged attacker with network access via multiple...

Microsoft Edge (Chromium) < 81.0.416.53 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 81.0.416.53. It is, therefore, affected by multiple vulnerabilities: - A use-after-free error exists in the audio component of Microsoft Edge Chromium. An unauthenticated, remote attacker can exploit this, via...

Microsoft Edge (Chromium) < 80.0.361.48 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 80.0.361.48. It is, therefore, affected by multiple vulnerabilities: - An integer overflow condition exists in the JavaScript component of Google Chrome. An unauthenticated, remote attacker can exploit this, v...

CVE-2020-12498

mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

CVE-2020-12498 Phoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution

mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

CVE-2020-3767

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an insufficient input validation vulnerability. Successful exploitation could lead to application-level denial-of-service dos...

CVE-2020-3336

A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an authenticated, remote attacker to modify the filesystem to cause a denial of service DoS or gain privileged access to the root filesystem. The vulnerabili...

PT-2020-5942 · Treck +1 · Treck Tcp/Ip Stack +1

Name of the Vulnerable Software and Affected Versions: Treck TCP/IP stack versions prior to 6.0.1.66 Description: A vulnerability exists in the implementation of IPv4 tunneling within the Treck TCP/IP stack due to insufficient input validation. Exploitation of this issue may allow a remote attack...

Cisco IOS XE Software Tcl DoS (cisco-sa-tcl-dos-MAZQUnMF)

According to its self-reported version, IOS is affected by a vulnerability in the Tool Command Line Tcl interpreter due to insufficient input validation of data passed to the Tcl interpreter. An authenticated, unprivileged, and local attacker can exploit this, by executing crafted Tcl arguments o...