mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.017 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-1198

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

PT-2020-12560

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue arises when the calling thread frees the data buffer pointer passed to a callback, and later, when the event loop executes the callback, the data buffer may no...

CVE-2020-24029

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...

PDF Viewer Heap Buffer Overflow

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the execution of operations beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow unauthorized...

PDF Viewer Heap Buffer Overflow

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the execution of operations beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow unauthorized...

CVE-2018-12475 obs-service-download_files allows downloading from localhost or intranet hosts

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-downloadfiles of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This issue affects:...

CVE-2018-1501

IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to missing security controls. IBM X-Force ID: 141226...

org.dom4j.io.SAXReader XML Unauthenticated Access Disclosure

The vulnerability of the new org.dom4j.io.SAXReader method in the library for working with XML, XPath, and XSLT is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

Android Media Framework Heap Buffer Overflow Unauthorized Access

The vulnerability of the vp8DecodeFrame function in the Media Framework component of the Android operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

CVE-2020-14729: Undefined Security Weakness

Vulnerability in SuiteCommerce Advanced SCA Sites component of Oracle NetSuite service. Supported versions that are affected are prior to 2020.1.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise NetSuite SCA. Successful attacks of this...

PT-2020-14061

Name of the Vulnerable Software and Affected Versions NetSuite SCA versions prior to 2020.1.4 Description The issue allows a low-privileged attacker with network access via HTTP to compromise NetSuite SCA. Successful attacks can result in unauthorized creation, deletion, or modification access to...

Multiple vulnerabilities fixed in F5 BIG-IP products

F5 has fixed several vulnerabilities in BIG-IP. Malicious remote users can exploit the vulnerabilities to cause a Denial-of-Service or perform Cross-Site-Scripting and Cross-Site-Request-Forgery attacks. Authenticated malicious parties can exploit some vulnerabilities exploit them to bypass...

PT-2020-4704

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 6.1.16 Description The issue is related to insufficient input validation in the shader generate main function of the Core component in Oracle VM VirtualBox. This can allow an attacker to gain unauthorized...

mysql: Server: Options unspecified vulnerability (CPU Jan 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Options. Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Vulnerabilities fixed in Elastic search

Vulnerabilities have been fixed in Elastic search. The vulnerabilities allow a malicious party to access gain access to sensitive data and to obtain elevated user privileges obtain. The developers of Elastic search have made updates available made available to fix the vulnerabilities. For more...

CVE-2020-6298

SAP Banking Services Generic Market Data, versions - 400, 450, 500, allows an unauthorized user to display protected Business Partner Generic Market Data GMD and change related GMD key figure values, due to Missing Authorization Check...

MySQL InnoDB Privilege Escalation

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to read, modify, add, or delete data using the MySQL protocol...