PT-2021-1768

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.4 through 8.5.5 Description: The issue is related to insufficient access controls in the Outside In Filters component of Oracle Outside In Technology, allowing an unauthenticated attacker with network...

CVE-2020-29493

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a SQL Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database, causing unauthorize...

Xiaomi Ax6 Authorization Issues Vulnerabilities

Xiaomi Ax6 is a router from Chinese company Xiaomi. Xiaomi Ax6 suffers from an authorization issue vulnerability that stems from a program misconfiguration, which can be exploited by an attacker to download unauthorized data...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client relates to the issue of operations beyond the buffer in memory. This allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to information and compromise its integrity and...

PT-2021-11841 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Hospital Management System version 4.0 Description: The issue allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs due to improper restriction o...

CVE-2020-24673

In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify database data Insert/Update/Delete, execute administration operations on the database such as shutdown the DBMS, recover the content of a given file present on the DBMS file...

Security Bulletin: Critical Security Vulnerability in RDS Client library affecting Rational Synergy (CVE-2014-3089)

Summary Clear text password in IBM Rational Directory Server RDS supplied Client library could allow potential hacker to gain access to RDS and access to unauthorized data used by consuming products such as Rational Synergy. Vulnerability Details | Subscribe to My Notifications to be notified of...

PT-2020-14063

Name of the Vulnerable Software and Affected Versions Oracle Cloud Infrastructure Identity and Access Management affected versions not specified Description The issue allows a high-privileged attacker with network access to compromise Oracle Cloud Infrastructure Identity and Access Management...

mysql: InnoDB unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

PT-2020-16753

Name of the Vulnerable Software and Affected Versions Synology SafeAccess versions prior to 1.2.3-0234 Description The issue allows remote attackers to execute arbitrary SQL commands via the domain parameter in request.cgi. This enables attackers to manipulate database queries, potentially leadin...

Sql injection

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrator user may exploit a vulnerable API call using specially crafted SQL queries which may lead to unauthorized data acce...

CVE-2020-3984

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrator user may exploit a vulnerable API call using specially crafted SQL queries which may lead to unauthorized data acce...

PT-2020-17821

Name of the Vulnerable Software and Affected Versions SD-WAN Orchestrator versions 3.3.2 through 3.3.2 P3 SD-WAN Orchestrator versions 3.4.x through 3.4.4 Description The issue is related to incorrect input validation, which allows for SQL-injection. An authenticated user may exploit a vulnerable...

CVE-2020-3984: Improper Neutralization of Special Elements used in an SQL Command

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrator user may exploit a vulnerable API call using specially crafted SQL queries which may lead to unauthorized data acce...

The vulnerability of the Promotions component of the Oracle Retail Customer Management and Segmentation Foundation software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Promotions component of the Oracle Retail Customer Management and Segmentation Foundation software is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information using the HTTP protocol...

The vulnerability of the Libraries component of the Java SE software platform allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Libraries component of the Java SE software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data...

Multiple vulnerabilities fixed in F5 BIG-IP products

F5 has fixed several vulnerabilities in BIG-IP. Malicious remotely can exploit the vulnerabilities to cause a Denial-of-Service or perform Cross-Site-Scripting attacks. Authenticated malicious actors can exploit some of the vulnerabilities exploit them to bypass security measures and gain access...

PT-2020-6156 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux affected versions not specified Description: The issue is related to the Bluetooth stack implementation in the Linux kernel, which allows access to data without type control. This can be exploited by a remote attacker...

Unspecified Vulnerability in Oracle Hyperion Analytic Provider Services Smart View Provider

Oracle Hyperion Analytic Provider Services is a set of financial modeling applications from Oracle Oracle. The software provides financial settlement, report production and other functions. A security vulnerability exists in Oracle Hyperion Analytic Provider Services Smart View Provider version...

OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...