PT-2020-4401

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c Description: The issue is related to insufficient input validation in the Java VM component, allowing a low-privileged attacker with Create Procedure privilege and...

PT-2020-4507

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.21 and prior Description The issue is related to insufficient input validation in the MySQL Server product, specifically in the Server: DML component. This allows a high-privileged attacker with network access via...

PT-2020-4402

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1 Description: The issue is related to insufficient input validation in the Database Vault component of Oracle Database Server. It allows a high-privileged attacker with Create Public...

PT-2020-4498

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.31 and prior MySQL Server versions 8.0.21 and prior Description The issue is related to insufficient input validation in the InnoDB component of the MySQL Server product. It allows a low-privileged attacker with netwo...

PT-2020-4835

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.21 and prior Description: The issue is related to insufficient input validation in the MySQL Server product, allowing a high-privileged attacker with network access via multiple protocols to compromise the server...

PT-2020-4535 · Oracle +10 · Mysql Server +9

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.31 and prior MySQL Server versions 8.0.21 and prior Description: The issue is related to insufficient input validation in the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with...

PT-2020-4472 · Oracle +10 · Mysql Server +9

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.6.49 and prior MySQL Server versions 5.7.31 and prior MySQL Server versions 8.0.21 and prior Description: The issue is related to insufficient input validation in the MySQL Server product, specifically in the Server: F...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Remote Desktop Services RDS for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2020-4395

Name of the Vulnerable Software and Affected Versions: VMware Horizon Client for Windows versions 5.x before 5.5.0 Description: The issue is related to a denial-of-service condition due to a file system access control problem during installation. It may allow an attacker to overwrite certain admi...

PT-2020-5151 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on PTX/QFX Series versions prior to 17.2X75-D105 Juniper Networks Junos OS on PTX/QFX Series versions prior to 18.1R3-S11 Juniper Networks Junos OS on PTX/QFX Series versions prior to 18.2R3-S5 Juniper Networks Junos...

The vulnerability of the user interface of Cisco Webex Meetings Server and Cisco Webex Meetings software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software user interfaces for Cisco Webex Meetings Server and Cisco Webex Meetings is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2020-4250 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: Remote Desktop Protocol RDP affected versions not specified Description: An information disclosure issue exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. This...

CVE-2020-9238

Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have a buffer overflow vulnerability. A function in a module does not verify inputs sufficiently. Attackers can exploit this vulnerability by sending specific request. This could compromise normal service of the affected device...

PT-2020-5128

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA versions affected versions not specified Description The issue is related to errors in checking incoming URLs, which could allow a remote attacker to bypass URL filters. This is due to insufficient input...

PT-2020-5074

Name of the Vulnerable Software and Affected Versions Cisco StarOS operating system for Cisco ASR 5000 Series Routers affected versions not specified Description The issue is related to insufficient input validation of CLI commands, which could allow an authenticated, local attacker to elevate...

Input validation

A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device. The vulnerability is due to insufficient input validation during authentication. An attacker could exploit this vulnerability by entering...

PT-2020-5118

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device. The issue is due t...

Security Advisory - Insufficient Input Validation Vulnerability in Some Huawei Phones

There is an insufficient input validation vulnerability in some Huawei products. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to access and modify the memory of the device by doing a series of operations. Successful exploit may cause the service...

The vulnerability of the ASP.NET components of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in insufficient input validation, allowing attackers to execute arbitrary code.

The vulnerability of ASP.NET package components in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code through a...

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a perpetrator to trigger a service failure.

The hardware virtualization system Hyper-V for Windows operating systems has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause service failures...