CVE-2020-2800

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network acce...

CVE-2020-2771

Vulnerability in the Oracle Solaris product of Oracle Systems component: Whodo. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2020-2746

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...

CVE-2020-2747

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: SSO Engine. Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Access Manage...

Unspecified Vulnerability in Oracle iSupport (CNVD-2020-27008)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the Internet-based customer support...

Unspecified Vulnerability in Oracle E-Business Suite Email Center (CNVD-2020-38202)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Email Center is one of the e-mail component. An...

Oracle Marketing Unauthorized Access Vulnerability (CNVD-2020-27005)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the...

Unspecified Vulnerability in Oracle E-Business Suite Depot Repair (CNVD-2020-36240)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. An unspecified vulnerability exists in Oracle...

Unspecified Vulnerability in Oracle Fusion Middleware (CVE-2020-2787)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Oracle E-Business Suite One-to-One Fulfillment Information Disclosure Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software, the software provides customer relationship management, service management, financial management and other functions. The software provides customer...

Unspecified Vulnerability in Oracle E-Business Suite E-Business Intelligence (CNVD-2020-38205)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management, etc. E-Business Intelligence is one of the business intelligence...

Unspecified Vulnerability in Oracle iSupport (CNVD-2020-27007)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the Internet-based customer support...

Unspecified Vulnerability in Oracle Partner Management

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is a seamless integration of a management suite. Oracle...

PT-2020-2499 · Oracle · Oracle Outside In Technology

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology version 8.5.4 Description: The issue is related to insufficient access controls in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This can be exploited...

The vulnerability of Google Chrome’s Skia graphics library, related to insufficient validation of input data, allows attackers to gain unauthorized access to information and compromise its integrity.

The vulnerability of Google Chrome’s Skia graphics library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity through a specially created HTML page...

The vulnerability of Google Chrome’s browser, related to operations beyond the buffer in memory, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to operations that occur outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...

The vulnerability of the LOAD DATA LOCAL INFILE component in the mysql (mysqljs) Node.js software module allows a hacker to gain unauthorized access to protected information.

The vulnerability of the LOAD DATA LOCAL INFILE component in the mysql mysqljs Node.js software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability in the web interface of Cisco Small Business router microprogramming software models 250, 350, 350X, 550X, 200, 300, and 500 allows a hacker to gain unauthorized access to protected information.

The vulnerability of the web interface of Cisco Small Business router microprogramming software models 250, 350, 350X, 550X, 200, 300, and 500 is related to data processing deficiencies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of microprogrammed software in HP PageWide and HP OfficeJet Pro printers arises from the use of an operator like “assert()”, which allows a malicious actor to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of Microprogrammed Software in HP PageWide and HP OfficeJet Pro printers is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow attackers to cause malfunctions during maintenance or gain unauthorized access to protected...

PT-2020-8135 · Hunesion · Hunesion I-Onenet

Name of the Vulnerable Software and Affected Versions: Hunesion i-oneNet version 3.0.6042.1200 Description: The issue allows a local user to access other users' information without authorization through brute force. This is due to incorrect access control in the software. Recommendations: For...