CVE-2020-9200

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

CVE-2020-9200: Improper Neutralization of Formula Elements in a CSV File

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, stems from insufficient validation of input data. This allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to elevate their privileges to root and execute arbitrary code...

PYSEC-2020-72

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

CVE-2020-15293 Memory corruption in Bitdefender Hypervisor Introspection (VA-9336)

Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input validation may lead to denial of service conditions...

PT-2020-5601

Name of the Vulnerable Software and Affected Versions openjpeg versions prior to 2.4.0 Description A flaw was found in openjpeg's src/lib/openjp2/t2.c, allowing an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from...

PT-2020-20520

Name of the Vulnerable Software and Affected Versions iManager NetEco 6000 version V600R021C00 Description The issue is related to a CSV injection vulnerability. An attacker with common privilege may exploit this vulnerability through some operations to inject CSV files. The vulnerability is due ...

PT-2020-5726

Name of the Vulnerable Software and Affected Versions: Oracle Cloud Infrastructure Data Science Notebook Sessions affected versions not specified Description: The issue is related to insufficient input validation in the Oracle Cloud Infrastructure Data Science platform, allowing a low-privileged...

PT-2020-6494

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 2020.013.20066 Adobe Acrobat versions prior to 2020.001.30010 Adobe Acrobat versions prior to 2017.011.30180 Adobe Reader versions prior to 2020.013.20066 Adobe Reader versions prior to 2020.001.30010 Adobe Read...

Security Advisory - CSV Injection Vulnerability in iManager NetEco Product

There has a CSV injection vulnerability in iManager NetEco Product. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV...

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of Blink’s web page display mechanism in the Google Chrome browser exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2020-5204 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: The issue is related to insufficient input validation in the browser. It may allow a remote attacker to access protected information. Recommendations: At the moment, ther...

The vulnerability of the software for Cisco Webex Meetings Server and Cisco Webex Meetings allows a intruder to gain unauthorized access to protected information.

The vulnerability of Cisco Webex Meetings Server and Cisco Webex Meetings software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2020-9115

ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in component. Due to insufficient input validation ...

CVE-2020-9115

ManageOne versions 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, ,6.5.1.1.B050, 8.0.0 and 8.0.1 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in component. Due to insufficient input validation ...

CVE-2020-9115

CVE-2020-9115 affects Huawei ManageOne versions 6.5.1.1.B010/B020/B030/B040/B050, and 8.0.0/8.0.1. The root cause is insufficient input validation in the plug-in component, enabling a high-privilege attacker to inject commands on the target device via certain operations. The vulnerability has a h...

PT-2020-20507

Name of the Vulnerable Software and Affected Versions ManageOne versions 6.5.1.1.B010 through 6.5.1.1.B050, 8.0.0, 8.0.1 Description The issue is related to a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the plug-in...

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or to...

The vulnerability of the eSupplier Connection component in the PeopleSoft Enterprise SCM application allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the eSupplierConnection component in the PeopleSoft Enterprise SCM application is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add,...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient input validation, which allows attackers to disclose protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...