PT-2020-3035

Name of the Vulnerable Software and Affected Versions Palo Alto Networks GlobalProtect versions 5.0.5 and earlier Description A denial-of-service issue allows authenticated local users to cause the Mac OS kernel to hang or crash due to insufficient input validation. This can be exploited by an...

CVE-2020-6391

Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a crafted HTML page...

PT-2020-1619

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Protocol RDP affected versions not specified Description The issue is related to the implementation of the Remote Desktop Protocol RDP in Windows operating systems, which is associated with insufficient input validation...

PT-2020-2437

Name of the Vulnerable Software and Affected Versions SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules All versions Description The issue is related to insufficient input validation, which can be exploited by sending specially crafted packets to the port...

PT-2020-1665

Name of the Vulnerable Software and Affected Versions Office Online Server affected versions not specified Description A spoofing issue exists due to incorrect validation of origin in cross-origin communications. The vulnerability is related to insufficient input validation, which can be exploite...

PT-2020-1662

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description The issue exists due to insufficient input validation in the Remote Desktop Client of Windows operating systems. This allows a remote attacker to execute arbitrary code...

PT-2020-1956

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE Software versions prior to 2.7.0 Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack on an...

PT-2020-2013

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.87 Description The issue is related to an inappropriate implementation in sharing, allowing a remote attacker to spoof security UI via a crafted HTML page. This can be achieved by exploiting insufficie...

PT-2020-2016

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.87 Description The issue is related to the inappropriate implementation of the CORS mechanism in Google Chrome, which is caused by insufficient input validation. This can be exploited by a remote...

PT-2020-2018

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.87 Description The issue is related to insufficient policy enforcement in downloads and insufficient input validation. This could allow a remote attacker to gain unauthorized access to information,...

CVE-2020-3115

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this...

CVE-2020-3129: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unity Connection Software could allow an authenticated, remote attacker to perform a stored cross-site scripting XSS attack. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker...

CVE-2020-3115: Improper Privilege Management

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-1125)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-1150)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1432)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2019-1153)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Core RDBMS component of the Oracle Database management system allows attackers to compromise data integrity or cause partial service interruptions.

The vulnerability of the Core RDBMS component of the Oracle Database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise data integrity or cause partial service interruptions...

PT-2020-1436

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection Software affected versions not specified Description The issue is related to insufficient input validation in the web-based management interface, which could allow a remote attacker to perform a stored cross-site scripti...

CVE-2019-19413

There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash...