PT-2020-3884

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.30 and prior MySQL Server versions 8.0.20 and prior Description: The issue is related to insufficient input validation in the Server: Pluggable Auth component of MySQL Server. This allows an attacker with network...

PT-2020-3331 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.20 and prior Description: The issue is related to insufficient input validation in the Server: Security: Privileges component of Oracle MySQL, allowing a high-privileged attacker with network access via multiple...

Microsoft Edge (Chromium) < 81.0.416.53 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 81.0.416.53. It is, therefore, affected by multiple vulnerabilities: - A use-after-free error exists in the audio component of Microsoft Edge Chromium. An unauthenticated, remote attacker can exploit this, via...

Microsoft Edge (Chromium) < 80.0.361.48 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 80.0.361.48. It is, therefore, affected by multiple vulnerabilities: - An integer overflow condition exists in the JavaScript component of Google Chrome. An unauthenticated, remote attacker can exploit this, v...

CVE-2020-12498

mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

CVE-2020-12498 Phoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution

mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

CVE-2020-3767

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an insufficient input validation vulnerability. Successful exploitation could lead to application-level denial-of-service dos...

CVE-2020-3336

A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an authenticated, remote attacker to modify the filesystem to cause a denial of service DoS or gain privileged access to the root filesystem. The vulnerabili...

PT-2020-5942

Name of the Vulnerable Software and Affected Versions Treck TCP/IP stack versions prior to 6.0.1.66 Description A vulnerability exists in the implementation of IPv4 tunneling within the Treck TCP/IP stack due to insufficient input validation. Exploitation of this issue may allow a remote attacker...

PT-2020-2980

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an authenticated, remote attacker with administrative...

PT-2020-2867

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software affected versions not specified Description A vulnerability in the software upgrade process could allow an authenticated, remote attacker to modify the filesystem,...

PT-2020-2977

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA affected versions not specified Description A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software could allow an unauthenticated, remote attacker to bypass the URL reputation filters...

Cisco IOS XE Software Tcl DoS (cisco-sa-tcl-dos-MAZQUnMF)

According to its self-reported version, IOS is affected by a vulnerability in the Tool Command Line Tcl interpreter due to insufficient input validation of data passed to the Tcl interpreter. An authenticated, unprivileged, and local attacker can exploit this, by executing crafted Tcl arguments o...

PT-2020-6613 · Treck · Treck Tcp/Ip Stack

Name of the Vulnerable Software and Affected Versions: Treck TCP/IP stack versions prior to 6.0.1.66 Description: The issue is related to an Out-of-bounds Read in the IPv6 implementation of the Treck TCP/IP stack. This is due to insufficient input validation, which can allow an attacker to gain...

PT-2020-2981

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregation Services Routers affected versions not specified Description A vulnerability in the Enhanced Charging Service ECS functionality could allow an unauthenticated, remote attacker to bypass traffic classification...

CVE-2020-0179

In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is required for exploitation.Product: AndroidVersions:...

Path traversal

In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is required for exploitation.Product: AndroidVersions:...

The vulnerability of the xHCI component in Oracle VM VirtualBox allows a hacker to gain full control over the application.

The vulnerability of the xHCI component in Oracle VM VirtualBox is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

PT-2020-3520

Name of the Vulnerable Software and Affected Versions Microsoft Server Message Block 1.0 SMBv1 affected versions not specified Description A remote code execution issue exists in the way the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. This is due to insufficient inpu...

PT-2020-4052

Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR CSME versions prior to 14.5.12 Description: The issue is caused by insufficient input validation in the DAL subsystem,...