2908 matches found
The vulnerability of the GetInstalledPackages function in the Application Lifestyle Management installation manager allows a malicious individual to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.
The vulnerability of the GetInstalledPackages function in the Application Lifestyle Management installation manager is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential...
The vulnerability in the modules/serverdensity_device.py of the configuration management system and SaltStack remote execution module allows a perpetrator to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.
The vulnerability in the modules/serverdensitydevice.py module of the Configuration Management system and SaltStack’s remote execution feature is related to a data processing error. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service...
The vulnerability of the vclmi.dll component in the OpenOffice.org office software suite, specifically LibreOffice, relates to numerical processing errors. This vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.
The vulnerability of the vclmi.dll component in the OpenOffice.org suite of office programs for LibreOffice is related to numerical processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data...
The vulnerability of the consoleinst.sh component of the Installation Manager IBM allows a malicious individual to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.
The vulnerability of the consoleinst.sh component of the Installation Manager IBM is related to privilege management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity...
The vulnerability of Huawei’s mobile phone microprogramming software, related to security mechanism errors, allows a perpetrator to gain unauthorized access to protected data.
The vulnerability of Huawei’s mobile phone microprogramming software is related to security mechanism errors. Exploiting this vulnerability can allow a hacker to gain unauthorized access to protected data...
The vulnerability of the Query component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to trigger a service failure or gain unauthorized access to protected information.
The vulnerability of the Query component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to remotely cause service interruptions or gain unauthorized access to protected...
The vulnerability of the Web Based Report Designer component of the Oracle Hyperion Financial Reporting application allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Web Based Report Designer component of the Oracle Hyperion Financial Reporting application for automating budget management processes is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protect...
The vulnerability of the GDI component of the Windows operating system, which allows a hacker to gain unauthorized access to protected information
The vulnerability of the Graphics Device Interface GDI component in the Windows operating system is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created applicatio...
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a malicious actor to gain unauthorized access to protected information or cause partial service disruption.
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause a partial service failure using the...
The vulnerability of the GDI component of the Windows operating system, which allows a hacker to gain unauthorized access to protected information
The vulnerability of the Graphics Device Interface GDI component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Oracle Marketing’s Marketing Administration component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network protocol...
The vulnerability of the “Estimate and Actual Charges” component of the Oracle Depot Repair automation software allows a intruder to gain unauthorized access to protected information.
The vulnerability of the “Estimate and Actual Charges” component of the Oracle Depot Repair automation software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through the...
The vulnerability of the User Interface sub-component of the Oracle Financial Services Balance Sheet Planning component in the bank analytics system’s simulation model allows a perpetrator to create, delete, or modify access rights to protected information, or gain read-only access to data.
The vulnerability of the User Interface sub-component of the Oracle Financial Services Balance Sheet Planning banking analytics system’s simulation model relates to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to create, delete, or modify access...
The vulnerability of the Transaction Processing sub-component of the Oracle FLEXCUBE Core Banking banking analytics system’s simulation model, Oracle Financial Services Applications. This vulnerability allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data. It can also cause partial service interruption.
The vulnerability of the Transaction Processing sub-component of the Oracle FLEXCUBE Core Banking banking analytics system, an imitation model of Oracle Financial Services Applications, is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious act...
CVE-2020-3184
A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates...
CVE-2020-12018
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data...
CVE-2020-12018
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data...
Out-of-bounds
Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data...
CVE-2020-12018
Advantech WebAccess Node (HMI platform) is affected by CVE-2020-12018 via an out-of-bounds read in IOCTL handling of ViewSrv.dll/DrawSrv.dll, exposing unauthorized data. Affected versions are WebAccess Node 8.4.4 and prior, and 9.0.0. The vulnerability enables information disclosure without authe...
