PT-2020-3247

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 5.1 through 19.2 Description The issue exists due to insufficient input validation in the Oracle Application Express component of Oracle Database Server. Exploitation of this issue may allow a remote attacke...

Unspecified Vulnerability in Oracle Database Server Application Express Component (CNVD-2020-44293)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Unspecified Vulnerability in Oracle Primavera Portfolio Management (CNVD-2020-52049)

Primavera Portfolio Management is a software solution for advising, planning, controlling and strategically analyzing your portfolio. A security vulnerability exists in the Investor Module component in Primavera Portfolio Management 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0, 19.0.0. An attacker could...

CVE-2020-14593: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2020-14573: Undefined Security Weakness

Vulnerability in the Java SE product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks o...

CVE-2020-14621: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JAXP. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

PT-2020-3460

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HRMS version 9.2 Description The issue is related to inadequate access control in the Time and Labor component of Oracle PeopleSoft Enterprise HRMS. It allows a low-privileged attacker with network access via HTTP to...

PT-2020-3464

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware MapViewer versions 12.2.1.3.0 through 12.2.1.4.0 Description The issue is related to the Oracle Fusion Middleware MapViewer product, specifically the Tile Server component. It allows an unauthenticated attacker with...

PT-2020-3446

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Session Border Controller versions 8.1.0 through 8.3.0 Description The issue is related to the File Upload component and can be exploited by a high-privileged attacker with network access via HTTP. Successful attacks require...

PT-2020-3461

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 12.2.1.3.0 through 12.2.1.4.0 Description The issue is related to insufficient access control in the Composer component of Oracle WebCenter Portal, allowing a remote attacker to modify, add, or delete data, or...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

The vulnerability of the implementation of the Single Thread Indirect Branch Predictors (STIBP) in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Linux operating system’s kernel implementation of the Single Thread Indirect Branch Predictors STIBP technology is related to insufficient input data validation and incorrect implementation of functions. Exploiting this vulnerability can allow an attacker to gain...

PT-2020-14298

Name of the Vulnerable Software and Affected Versions mapfish-print versions prior to 3.24 Description The issue allows a user to perform an XML External Entity XXE attack using the provided SDL style. This can be exploited by manipulating the XML input to access unauthorized data or disrupt...

CVE-2020-5583

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors...

CVE-2020-5583

CVE-2020-5583 affects Cybozu Garoon 4.0.0 to 5.0.1. The vulnerability allows remote authenticated attackers to bypass access restrictions and obtain unauthorized Multi-Report data via unspecified vectors, effectively bypassing view privileges for that data. Impact is limited to exposure of Multi-...

PT-2020-18557

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 5.0.1 Description The issue allows remote authenticated attackers to bypass access restrictions and obtain unauthorized Multi-Report's data. The exact vectors used for the bypass are not specified...

The vulnerability in the modules/serverdensity_device.py of the configuration management system and SaltStack remote execution module allows a perpetrator to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability in the modules/serverdensitydevice.py module of the Configuration Management system and SaltStack’s remote execution feature is related to a data processing error. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service...

The vulnerability of the doc/docmacromode.cxx component in the LibreOffice office software package allows a perpetrator to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the doc/docmacromode.cxx component in the LibreOffice office software package is related to a deficiency in the processing of macros. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise th...

The vulnerability of the GetInstalledPackages function in the Application Lifestyle Management installation manager allows a malicious individual to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the GetInstalledPackages function in the Application Lifestyle Management installation manager is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential...

The vulnerability of the vclmi.dll component in the OpenOffice.org office software suite, specifically LibreOffice, relates to numerical processing errors. This vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the vclmi.dll component in the OpenOffice.org suite of office programs for LibreOffice is related to numerical processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data...