PT-2020-2493

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 11.1.2.3.0 and 12.2.1.3.0 Description The issue is related to insufficient access control in the SSO Engine component of Oracle Access Manager, allowing a low-privileged attacker with network access via HTTP to...

PT-2020-2628

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM versions 9.3.3 through 9.3.6 Description The issue is related to inadequate access control in the Security component of Oracle Agile PLM, allowing a remote attacker to gain unauthorized access to protected information via the...

PT-2020-2321

Name of the Vulnerable Software and Affected Versions Oracle Marketing versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access controls in the Marketing Administration component of Oracle Marketing. It can be exploited by a remote attacker to gain unauthorized acces...

PT-2020-2592

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS Campus Community version 9.2 Description The issue is related to insufficient access control in the Self-Service component of the PeopleSoft Enterprise CS Campus Community product. It allows a low-privileged attacker...

PT-2020-2573

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.57 Description The issue is related to inadequate access control in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. It allows an unauthenticated attacker with network...

PT-2020-2532

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server version 11.1.1.9.0 Description The issue is related to insufficient access control in the Web Listener component of Oracle HTTP Server, allowing an unauthenticated attacker with network access via HTTP to compromise the...

PT-2020-2608

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HRMS version 9.2 Description The issue is related to inadequate access control in the Candidate Gateway component of PeopleSoft Enterprise HRMS, allowing an unauthenticated attacker with network access via HTTP to...

PT-2020-2626

Name of the Vulnerable Software and Affected Versions Oracle Transportation Management versions 6.3.7, 6.4.2, and 6.4.3 Description The issue is related to inadequate access control in the Security component of Oracle Transportation Management. It allows a low-privileged attacker with network...

PT-2020-2577

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 Description The issue is related to inadequate access control in the Process Scheduler component of Oracle PeopleSoft Enterprise PeopleTools. It allows an unauthenticated attacker wi...

PT-2020-2591

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise SCM Purchasing version 9.2 Description The issue is related to inadequate access control in the Supplier Change component, allowing a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterpris...

PT-2020-2292

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions prior to 19.2 Description The issue is related to inadequate access control in the Oracle Application Express component of Oracle Database Server. It allows a low-privileged attacker with network access via...

The vulnerability of Google Chrome’s Skia graphics library, related to insufficient validation of input data, allows attackers to gain unauthorized access to information and compromise its integrity.

The vulnerability of Google Chrome’s Skia graphics library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity through a specially created HTML page...

The vulnerability of Google Chrome’s browser, related to operations beyond the buffer in memory, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to operations that occur outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...

CVE-2020-10510

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data...

CVE-2020-10510

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data...

PT-2020-12180

Name of the Vulnerable Software and Affected Versions Sunnet eHRD affected versions not specified Description The issue is related to Broken Access Control in Sunnet eHRD, a human training and development management system. After logging in, attackers can use a specific URL to access unauthorized...

CVE-2020-10510: Incorrect Authorization

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data...

Sunnet eHRD Improper Access Control Vulnerability

Sunnet eHRD is a talent training and development management system. An improper access control vulnerability exists in Sunnet eHRD. An authenticated attacker could exploit the vulnerability to access unauthorized functionality and data via a specific URL...

The vulnerability of the LOAD DATA LOCAL INFILE component in the mysql (mysqljs) Node.js software module allows a hacker to gain unauthorized access to protected information.

The vulnerability of the LOAD DATA LOCAL INFILE component in the mysql mysqljs Node.js software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability in the web interface of Cisco Small Business router microprogramming software models 250, 350, 350X, 550X, 200, 300, and 500 allows a hacker to gain unauthorized access to protected information.

The vulnerability of the web interface of Cisco Small Business router microprogramming software models 250, 350, 350X, 550X, 200, 300, and 500 is related to data processing deficiencies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...