PT-2020-2592

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS Campus Community version 9.2 Description The issue is related to insufficient access control in the Self-Service component of the PeopleSoft Enterprise CS Campus Community product. It allows a low-privileged attacker...

PT-2020-2499 · Oracle · Oracle Outside In Technology

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology version 8.5.4 Description: The issue is related to insufficient access controls in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This can be exploited...

PT-2020-2628

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM versions 9.3.3 through 9.3.6 Description The issue is related to inadequate access control in the Security component of Oracle Agile PLM, allowing a remote attacker to gain unauthorized access to protected information via the...

PT-2020-2321

Name of the Vulnerable Software and Affected Versions Oracle Marketing versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access controls in the Marketing Administration component of Oracle Marketing. It can be exploited by a remote attacker to gain unauthorized acces...

PT-2020-2591

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM Purchasing version 9.2 Description The issue is related to inadequate access control in the Supplier Change component, allowing a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterpris...

CVE-2020-10510

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data...

CVE-2020-10510

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data...

Sunnet eHRD Improper Access Control Vulnerability

Sunnet eHRD is a talent training and development management system. An improper access control vulnerability exists in Sunnet eHRD. An authenticated attacker could exploit the vulnerability to access unauthorized functionality and data via a specific URL...

CVE-2020-10510: Incorrect Authorization

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data...

PT-2020-12180

Name of the Vulnerable Software and Affected Versions Sunnet eHRD affected versions not specified Description The issue is related to Broken Access Control in Sunnet eHRD, a human training and development management system. After logging in, attackers can use a specific URL to access unauthorized...

mysqljs LOAD DATA LOCAL INFILE Unauthorized Access

The vulnerability of the LOAD DATA LOCAL INFILE component in the mysql mysqljs Node.js software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Cisco Small Business Router Unauthorized Access

The vulnerability of the web interface of Cisco Small Business router microprogramming software models 250, 350, 350X, 550X, 200, 300, and 500 is related to data processing deficiencies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2020-6763

Name of the Vulnerable Software and Affected Versions SAP Solution Manager Diagnostics Agent version 720 Description The issue is related to the transmission of data in an open format, allowing an attacker to gain unauthorized access to protected information. This is due to a missing authenticati...

HP PageWide and HP Unauthorized Access

The vulnerability of Microprogrammed Software in HP PageWide and HP OfficeJet Pro printers is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow attackers to cause malfunctions during maintenance or gain unauthorized access to protected...

PT-2020-8135 · Hunesion · Hunesion I-Onenet

Name of the Vulnerable Software and Affected Versions: Hunesion i-oneNet version 3.0.6042.1200 Description: The issue allows a local user to access other users' information without authorization through brute force. This is due to incorrect access control in the software. Recommendations: For...

postgresql-common pg_ctlcluster Data Compromise

The vulnerability of the pgctlcluster script in the postgresql-common package relates to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

LibVNCServer ultra.c Buffer Overflow Unauthorized Access

The vulnerability of the ultra.c component of the cross-platform library LibVNCServer is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and gain unauthorized access to confidential data...

Windows Modules Installer Service Unauthorized Access

The vulnerability of the Windows Modules Installer service in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data through a specially created application...

Samba LDAP Unauthorized Access

The vulnerability of the Samba network communication software component of the Active Directory LDAP server is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data...

Unspecified Vulnerability in Oracle Fusion Middleware Reports Developer

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. An unspecified vulnerability exists in Oracle Fusion Middleware Reports...