The vulnerability of Firefox’s browser security policy allows a hacker to gain unauthorized access to confidential data and compromise data integrity.

The vulnerability of Firefox’s browser security policy is related to the lack of measures to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to confidential data and compromise data integrity using object tags...

OpenJDK: Application data accepted before TLS handshake completion (JSSE, 8235691)

A flaw was found in the TLS/SSL implementation in the JSSE component of OpenJDK, where it did not properly handle application data packets received before the handshake completion. This flaw allowed unauthorized injection of data at the beginning of a TLS session...

The vulnerability in Google Chrome’s built-in Database API, IndexedDB, allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome’s built-in Database API, IndexedDB, relates to memory management after freeing resources. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and accessibility through a specially...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-24427)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle Unauthorized Access Vulnerability

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-23421)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle MySQL Connectors (CNVD-2020-72715 )

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Connectors is one of the drivers for connecting applications that use MySQL. A security vulnerability exists in Oracle MySQL Connectors. An attacker could exploit this vulnerability to unauthorized...

Unspecified Vulnerability in Oracle Java SE (CNVD-2020-72710)

Oracle Java SE is a U.S. Oracle Oracle for the development and deployment of desktop, server and embedded devices and real-time environments in Java applications. A security vulnerability exists in the JSSE component in Oracle Java SE versions 11.0.6 and 14. An attacker could exploit the...

Unspecified Vulnerability in Oracle Fusion Middleware Access Manager

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. A security vulnerability exists in the Access Manager version 11.1.2.3.0 an...

Oracle Weblogic Server Information Disclosure Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

Unspecified Vulnerability in Oracle Financial Services Applications Insurance Accounting Analyzer

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Insurance Accounting Analyzer, which can be...

Oracle GraalVM Enterprise Edition Unauthorized Access Vulnerability (CNVD-2020-26995)

Oracle GraalVM is the United States Oracle Oracle company's set of instant compiler written in the Java language. A security vulnerability exists in Oracle GraalVM in the Tools component of Oracle GraalVM Enterprise Edition versions 19.3.1 and 20.0.0. An attacker could exploit the vulnerability t...

Unspecified Vulnerability in Oracle E-Business Suite Human Resources

Oracle E-Business Suite E-Business Suite is a set of Oracle's fully integrated global business management software, which provides customer relationship management, service management, financial management, etc. Human Resources is one of the human resources management components. The software...

Oracle MySQL Server Denial of Service Attack Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server 5.7.29 and earlier versions and the InnoDB component of Oracle MySQL 8.0.19 and earlier versions...

Unspecified Vulnerability in Oracle E-Business Suite iSupport

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the Internet-based customer support...

The vulnerability of the header::add_INFO_descriptor function in the VCF file handling package VCFtools allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the header::addINFOdescriptor function in the VCF file handling library VCFtools relates to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through a specially created vcf fi...

Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Loan Loss Forecasting and Provisioning

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Loan Loss Forecasting and...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2020-23827)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation. The products provide human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise PeopleTools is one of the tools and technology platform...

Unspecified Vulnerability in Oracle E-Business Suite Universal Work Queue

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Universal Work Queue is one of the tools that c...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HRMS

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Corporation. The product provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HRMS is one of the human resource management components,...