Vuldb Updates

A vulnerability classified as critical was found in Oracle GraalVM Enterprise Edition 19.3.4/20.3.0. Affected by this vulnerability is an unknown functionality of the component Java. The manipulation leads to an unknown weakness. This vulnerability is known as CVE-2020-14803. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Java SE 8u291/11.0.11/16.0.1. It has been classified as critical. Affected is an unknown function of the component Hotspot. The manipulation leads to Remote Code Execution. This vulnerability is traded as CVE-2021-2388. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Oracle Java SE 7u271/8u261/11.0.8/15 and classified as critical. This vulnerability affects unknown code of the component Hotspot. The manipulation leads to an unknown weakness. This vulnerability was named CVE-2020-14792. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Java SE 7u271/8u261/11.0.8/15 and classified as problematic. This issue affects some unknown processing of the component JNDI. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2020-14781. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Java SE 7u271/8u261/11.0.8/15. It has been classified as problematic. Affected is an unknown function of the component Libraries. The manipulation leads to an unknown weakness. This vulnerability is traded as CVE-2020-14782. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Java SE 7u271/8u261/11.0.8/15. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Libraries. The manipulation leads to an unknown weakness. This vulnerability is known as CVE-2020-14797. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Oracle Java SE 7u271/8u261/11.0.8/15. This affects an unknown part of the component Libraries. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2020-14796. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Java SE 7u301/8u291/11.0.11/16.0.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Library. The manipulation leads to an unknown weakness. This vulnerability is handled as CVE-2021-2369. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Oracle Java SE 7u301/8u291/11.0.11/16.0.1. This vulnerability affects unknown code of the component Networking. The manipulation leads to information disclosure. This vulnerability was named CVE-2021-2341. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Oracle Java SE 8u251/11.0.7/14.0.1. Affected by this issue is some unknown functionality of the component 2D. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2020-14581. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Oracle Java SE 8u251/11.0.7/14.0.1. Affected is an unknown function of the component Libraries. The manipulation leads to an unknown weakness. This vulnerability is traded as CVE-2020-14556. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Java SE 7u271/8u261/11.0.8/15. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Serialization. The manipulation leads to denial of service. This vulnerability is handled as CVE-2020-14779. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Oracle Java SE 7u261/8u251. This affects an unknown part of the component Libraries. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2020-14578. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Oracle Java SE 7u261/8u251 and classified as problematic. This vulnerability affects unknown code of the component Libraries. The manipulation leads to denial of service. This vulnerability was named CVE-2020-14579. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Java SE 7u261/8u251/11.0.7/14.0.1 and classified as problematic. This issue affects some unknown processing of the component JSSE. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2020-14577. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Java SE 7u261/8u251/11.0.7/14.0.1. It has been rated as critical. This issue affects some unknown processing of the component JAXP. The manipulation leads to an unknown weakness. The identification of this vulnerability is CVE-2020-14621. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Electron up to 9.3.x/10.1.x/11.0.x/12.0.0-beta.8. This issue affects some unknown processing of the component IPC Message Handler. The manipulation leads to exposure of resource. The identification of this vulnerability is CVE-2020-26272. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Puma up to 4.3.8/5.5.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to http request smuggling. This vulnerability is traded as CVE-2021-41136. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in ZZCMS 2022 and classified as critical. This vulnerability affects unknown code of the file /admin/sendmailto.php?tomail=&groupid=. The manipulation leads to sql injection. This vulnerability was named CVE-2022-40446. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in ZZCMS 2022 and classified as critical. This issue affects some unknown processing of the file /admin/baojia_list.php. The manipulation of the argument keyword leads to sql injection. The identification of this vulnerability is CVE-2022-40447. The attack may be initiated remotely. There is no exploit available.