Cisco IoT Field Network Director SOAP API Unauthorized Access

The vulnerability of the SOAP API interface of the Cisco IoT Field Network Director software solution is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through specially...

Windows Delivery Optimization Unauthorized Access

The vulnerability of the Windows Delivery Optimization service is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Intel Unite Buffer Overflow Information Disclosure

The vulnerability of the Intel Unite conference communication software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Cisco TelePresence Collaboration Endpoint xAPI Unauthorized Access

The vulnerability of the xAPI microprogramming software component of the Cisco TelePresence Collaboration Endpoint device relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to...

Oracle Business Intelligence Enterprise Edition Installation Unauthorized Access

The vulnerability of the Installation component of the Oracle Business Intelligence Enterprise Edition software lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

Core server component Unauthorized Access

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using IIOP and T3 protocols...

MySQL Server LDAP Auth Bypass

The vulnerability of the Server component’s Security: LDAP Auth component of the MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected informati...

Pre-Login Component Unauthorized Access

The vulnerability of the Pre-Login component of the Oracle FLEXCUBE Direct Banking system relates to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network...

Oracle Hospitality RES 3700 Component Unauthorized Access

The vulnerability of the CAL component of the Oracle Hospitality RES 3700 restaurant management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using TCP...

PT-2020-4885 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint, which can be exploited by a remote attacker to disclose protected information. Recommendations: A...

Oracle Applications Manager SQL Extensions Unauthorized Access

The vulnerability of the SQL Extensions component of the Oracle Applications Manager, a tool for managing Oracle Applications, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information using the...

Oracle REST Data Services General Component jQuery Unauthorized Access

The vulnerability of the General component jQuery in the Oracle REST Data Services data service is related to security mechanism failures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information via the HTTP network...

Oracle Database Server Unauthorized Access

The vulnerability of the RDBMS Security component of the Oracle Database Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the Oracle Net protocol...

Microsoft SharePoint Server Memory Object Processing Unauthorized Access

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Text Services Framework Unauthorized Access

The vulnerability of the Text Services Framework TSF component in Windows operating systems is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

Intel processor BIOS Privilege Escalation

The vulnerability of Intel processor BIOS microprogramming software is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

File type detection utility do_bid_note Heap Buffer Overflow

The vulnerability of the dobidnote function in the File type-detection utility readelf.c involves reading beyond the allocated buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

PDF Buffer Overflow Information Disclosure

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

PDF Buffer Overflow Information Disclosure

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...