Caldera Access Control Error Vulnerability

Caldera is a suite of software from the French company Caldera that provides color management, imaging and processing solutions for printer devices. An access control error vulnerability exists in authsvc in versions of Caldera prior to 2.6.5, which can be exploited by an attacker to bypass...

CVE-2020-1790

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands...

UBUNTU-CVE-2020-5211

In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems...

Huawei GaussDB 200 Command Injection Vulnerability

Huawei GaussDB 200 is a distributed parallel relational database system developed by Huawei China based on the open source database Postgres-XC. A command injection vulnerability exists in Huawei GaussDB 200 version 6.5.1, which arises from a program that fails to adequately perform input...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2020-02995)

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. A cross-site scripting vulnerability exists in Adobe Experience Manager 6.3, 6.4, and 6.5. An attacker can exploit this vulnerability to obtain...

Open TFTP Server Formatting String Error Vulnerability

Open TFTP Server MT is a file transfer server. A formatting string error vulnerability exists in the 'logMess' function in Open TFTP Server MT version 1.65 and earlier. The vulnerability stems from a network system or product that receives external formatted strings as parameters with lax filteri...

Unspecified Vulnerability in CloudBees Jenkins Rundeck Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Rundeck Plugin is used in one of the...

IBM DB2 High Performance Unload load for LUW Code Issue Vulnerability

IBM DB2 is a relational database management system. The system is executed on UNIX, Linux, IBMi, z/OS, and Windows server versions.High Performance Unload load for LUW is a DB2 utility program. The program can be used to unload DB2 tables from a tablespace or image copy. A security vulnerability...

Cisco IOS XR Access Control Error Vulnerability

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. An access control error vulnerability exists in the access control logic for NETCONF over Secure Shell SSH in Cisco IOS XR versions 6.5.1 and 6.5.2, which stems from a lack of...

CVE-2019-8085

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8083

Adobe Experience Manager versions 6.5, 6.4 and 6.3 have a cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8081

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have an authentication bypass vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8089

Adobe Experience Manager Forms versions 6.3-6.5 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2019-36629)

Cisco Firepower Management Center is the nerve center for managing Cisco network security solutions, improving the effectiveness of Cisco network security solutions by providing centralized, integrated, and simplified management. A stored cross-site scripting vulnerability exists in the web-based...

Adobe Experience Manager Forms Cross-Site Scripting Vulnerability (CNVD-2019-37118)

Adobe Experience Manager AEM Forms is an enterprise document and forms platform that lets you capture and process information, deliver personalized communications, and protect and track sensitive information. A reflected cross-site scripting vulnerability exists in Adobe Experience Manager Forms...

Adobe Experience Manager Command Injection Vulnerability

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. A command injection vulnerability exists in Adobe Experience Manager 6.0, 6.1, 6.2, 6.3, 6.4, 6.5. An attacker can exploit this vulnerability to...

CVE-2019-7964

Adobe Experience Manager versions 6.5, and 6.4 have an authentication bypass vulnerability. Successful exploitation could lead to remote code execution...

Adobe Experience Manager Authentication Bypass Vulnerability

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An authentication bypass vulnerability exists in Adobe Experience Manager 6.5 and 6.4. An attacker can exploit this vulnerability to achieve remote...

Cisco IOS XR Input Validation Error Vulnerability (CNVD-2019-46439)

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. An input validation error vulnerability exists in the Intermediate System to Intermediate System IS-IS routing protocol in Cisco IOS XR versions 6.5.1 through 6.6.3, which stems fro...

CVE-2019-8998

An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service the /proc filesystem of BlackBerry QNX Software Development Platform versions 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen proces...