UBUNTU-CVE-2020-6490

Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...

Cisco AMP for Endpoints Mac Connector Software Denial of Service Vulnerability

Cisco AMP for Endpoints Mac Connector Software is a suite of endpoint applications from Cisco that integrate static and dynamic malware analysis and threat intelligence on the macOS platform. The program can analyze the behavior and intent of malware, the impact of the threat and defense methods....

UBUNTU-CVE-2020-13249

libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadblib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle...

Google Chrome Security Bypass Vulnerability (CNVD-2020-29227)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the add-in program in versions prior to Google Chrome 83.0.4103.61, which stems from the program failing to adequately validate data. The vulnerability can be exploited by an attacker to bypass...

Google Chrome Security Bypass Vulnerability (CNVD-2020-29303)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the full-screen mode of Google Chrome prior to version 83.0.4103.61, which stems from the program failing to adequately validate user input. The vulnerability can be exploited by an attacker to spo...

USN-4365-1 bind9 vulnerabilities

Lior Shafir, Yehuda Afek, and Anat Bremler-Barr discovered that Bind incorrectly limited certain fetches. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service, or possibly use Bind to perform a reflection attack. CVE-2020-8616 Tobias...

The vulnerability of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment TelevisGo, allows a intruder to execute arbitrary code.

The vulnerability of the UltraVNC software, which is part of the monitoring, control, and remote maintenance module for the commercial cold production equipment TelevisGo, is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute...

CVE-2020-8100

Improper Input Validation vulnerability in the cevakrnl.rv0 module as used in the Bitdefender Engines allows an attacker to trigger a denial of service while scanning a specially-crafted sample. This issue affects: Bitdefender Bitdefender Engines versions prior to 7.84063...

The vulnerability of the Mail sub-component of the Oracle iSupport component in the Oracle E-Business Suite system allows a perpetrator to gain access to read data and modify that data.

The vulnerability of the Mail sub-component of the Oracle iSupport component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, or delete data through HTTP...

The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite allows a perpetrator to gain access to and modify data.

The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, ...

The vulnerability of the Telerik UI software for ASP.NET AJAX exists due to insufficient testing of input data. This allows attackers to execute arbitrary file downloads or execute arbitrary code.

The vulnerability of the Telerik UI software for ASP.NET AJAX exists due to insufficient testing of input data. Exploiting this vulnerability allows a malicious actor to perform arbitrary file downloads or execute arbitrary code...

The vulnerability of the Outcome-Result sub-component of the Oracle Customer Interaction History component in the Oracle E-Business Suite automation system allows a malicious actor to gain access to and modify data.

The vulnerability of the Outcome-Result sub-component of the Oracle Customer Interaction History component in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify,...

The vulnerability of the sub-component “Attachments/File Upload” in Oracle Applications Framework of the Oracle E-Business Suite allows a perpetrator to modify data.

The vulnerability of the Attachments/File Upload sub-component in Oracle Applications Framework of the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete dat...

The vulnerability of the Profile sub-component of the Oracle iSupport component in the Oracle E-Business Suite enterprise automation system allows a perpetrator to gain access to read data and modify that data.

The vulnerability of the Profile sub-component of the Oracle iSupport component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, or delete data through HTT...

CVE-2020-11531

The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the database schema name when handling a DR-SCHEMA-SYNC request. This allows an authenticated attacker to execute code in the context of the product by writing a JSP file to the webroot...

UliCMS Cross-Site Scripting Vulnerability (CNVD-2020-35501)

UliCMS is an open source content management system CMS. The system supports features such as access control and WYSIWYG editing. A cross-site scripting vulnerability exists in UliCMS versions prior to 2020.2. The vulnerability stems from a lack of proper validation of client-side data by the WEB...

ZenCart MailBeez plugin cross-site scripting vulnerability

MailBeez plugin for ZenCart is a Danish MailBeez company's post-sale e-mail auto-trigger plugin for use in ZenCart e-commerce system. A cross-site scripting vulnerability exists in the mailhive/cloudbeez/cloudloader.php file and the mailhive/cloudbeez/cloudloadercore.php file in MailBeez versions...

The vulnerability of the WordPress website content management system, related to server-side query manipulation, allows attackers to access sensitive data, compromise its integrity, and cause service interruptions.

The vulnerability of the WordPress website content management system is related to the SSRF request manipulation. This is because URL validation does not consider the interpretation of the name as a sequence of hexadecimal characters. Exploiting this vulnerability can allow an attacker to gain...

CVE-2020-3307

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...

PT-2020-2518 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is due to insufficient input validation in the web UI of the software, allowing a remote attacker to send a crafted HTTP request to an...