PT-2020-6763

Name of the Vulnerable Software and Affected Versions SAP Solution Manager Diagnostics Agent version 720 Description The issue is related to the transmission of data in an open format, allowing an attacker to gain unauthorized access to protected information. This is due to a missing authenticati...

The vulnerability of microprogrammed software in HP PageWide and HP OfficeJet Pro printers arises from the use of an operator like “assert()”, which allows a malicious actor to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of Microprogrammed Software in HP PageWide and HP OfficeJet Pro printers is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow attackers to cause malfunctions during maintenance or gain unauthorized access to protected...

PT-2020-8135 · Hunesion · Hunesion I-Onenet

Name of the Vulnerable Software and Affected Versions: Hunesion i-oneNet version 3.0.6042.1200 Description: The issue allows a local user to access other users' information without authorization through brute force. This is due to incorrect access control in the software. Recommendations: For...

The vulnerability of the ultra.c component of the cross-platform library LibVNCServer, related to the occurrence of operations outside the buffer in memory, allows a perpetrator to trigger a service failure and gain unauthorized access to confidential data.

The vulnerability of the ultra.c component of the cross-platform library LibVNCServer is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures and gain unauthorized access to confidential data...

The vulnerability of the Active Directory LDAP server component in Samba networking software allows a perpetrator to gain unauthorized access to confidential data.

The vulnerability of the Samba network communication software component of the Active Directory LDAP server is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data...

The vulnerability of the Windows Modules Installer service in Windows operating systems allows a hacker to gain unauthorized access to protected data.

The vulnerability of the Windows Modules Installer service in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data through a specially created application...

The vulnerability of the pg_ctlcluster script in the postgresql-common package allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise the integrity of the data.

The vulnerability of the pgctlcluster script in the postgresql-common package relates to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

Unspecified Vulnerability in Oracle Hospitality Applications (CNVD-2020-17126)

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle. The product offers features such as human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Unspecified Vulnerability in Oracle Fusion Middleware Reports Developer

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. An unspecified vulnerability exists in Oracle Fusion Middleware Reports...

Unspecified Vulnerability in Oracle Fusion Middleware Reports Developer (CNVD-2020-17119)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. An unspecified vulnerability exists in Oracle Fusion Middleware Reports...

CVE-2019-10790

taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. taffy sets an internal index for each data item in its DB. However, it is found...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Human Resources

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation. It provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM Human Resources is one of the human resource management...

Unspecified Vulnerability in Oracle Hospitality Applications (CNVD-2020-17125)

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle. The product offers features such as human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

PT-2020-7867

Name of the Vulnerable Software and Affected Versions: Enorth Webpublisher CMS affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter in the "pub/m pending news/delete pending news.jsp" endpoint. This enables...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures using the HTTP...

The vulnerability of the EAI component of the Siebel UI Framework allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the EAI component of the Siebel UI Framework is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

The vulnerability of the Filesystem component of the Oracle Solaris operating system allows a perpetrator to gain access to modify, add, or delete data, or to cause a partial service failure.

The vulnerability of the Oracle Solaris operating system’s Filesystem component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause partial service interruptions...

The vulnerability of the Activity Guide component in the PeopleSoft Enterprise PeopleTools business application package allows a malicious individual to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.

The vulnerability of the Activity Guide component in the PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to obtain unauthorized access...

The vulnerability of the Security component of the Oracle Retail Customer Management and Segmentation Foundation software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security component of the Oracle Retail Customer Management and Segmentation Foundation software is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information using the HTTP protocol...

Security Bulletin: Information disclosure vulnerability affects IBM Sterling B2B Integrator (CVE-2016-0385)

Summary IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain unauthorized data. Vulnerability Details CVEID: CVE-2016-0385 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to bypass security restrictions caused by a buffer overflow. This...