Lucene search
+L

8717 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/27 12:00 a.m.•4 views

CVE-2016-5590: Undefined Security Weakness

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...

7.2CVSS5.8AI score0.02028EPSS
SaveExploits0References1
OSV
OSV
•added 2017/01/26 11:34 a.m.•6 views

SUSE-SU-2017:0292-1 Security update for dbus-1

This update for dbus-1 to version 1.8.22 fixes one security issue and bugs. The following security issue was fixed: - bsc1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. The following upstream changes are included: - Change the default...

7.6AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2017/01/25 12:00 a.m.•322 views

MySQL Enterprise Monitor 3.2.x < 3.2.5.1141 Multiple Vulnerabilities (SWEET32) (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.2.x prior to 3.2.5.1141. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist in the bundled version of OpenSSL in s3srvr.c, sslsess.c,...

9.8CVSS7.8AI score0.94697EPSS
SaveExploits8References15
Tenable Nessus
Tenable Nessus
•added 2017/01/25 12:00 a.m.•71 views

MySQL Enterprise Monitor 3.3.x < 3.3.1.1112 Multiple Vulnerabilities (SWEET32) (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.3.x prior to 3.3.1.1112. It is, therefore, affected by multiple vulnerabilities in the bundled version of OpenSSL : - Multiple integer overflow conditions exist in s3srvr.c, sslsess.c,...

9.8CVSS7.8AI score0.94697EPSS
SaveExploits8References15
Tenable Nessus
Tenable Nessus
•added 2017/01/25 12:00 a.m.•35 views

MySQL Enterprise Monitor 3.1.x < 3.1.6.7959 Java Object Deserialization RCE (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.1.x prior to 3.1.6.7959. It is, therefore, affected by a remote code execution vulnerability in the JMXInvokerServlet interface due to improper validation of Java objects before...

10CVSS8.2AI score0.85562EPSS
SaveExploits8References4
Tenable Nessus
Tenable Nessus
•added 2017/01/25 12:00 a.m.•58 views

MySQL Enterprise Monitor 3.1.x < 3.1.5.7958 Multiple Vulnerabilities (SWEET32) (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.1.x prior to 3.1.5.7958. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the bundled version of Apache Tomcat in the Manage...

9.8CVSS8.1AI score0.94697EPSS
SaveExploits8References21
Tenable Nessus
Tenable Nessus
•added 2017/01/25 12:00 a.m.•67 views

MySQL Enterprise Monitor 3.2.x < 3.2.2.1075 Multiple Vulnerabilities (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.2.x prior to 3.2.2.1075. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the bundled version of Apache Tomcat in the Manage...

10CVSS8.1AI score0.85562EPSS
SaveExploits8References9
Tenable Nessus
Tenable Nessus
•added 2017/01/25 12:00 a.m.•53 views

MySQL Enterprise Monitor 3.1.x < 3.1.4.7895 Agent Subcomponent RCE (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.1.x prior to 3.1.4.7895. It is, therefore, affected by a remote code execution vulnerability in the Agent subcomponent that allows an authenticated, remote attacker to execute arbitrar...

7.2CVSS8.4AI score0.02028EPSS
SaveExploits0References3
n0where
n0where
•added 2017/01/24 8:05 a.m.•43 views

Weapon of Mass Destruction: WMD

Weapon of Mass Destruction This is a python tool with a collection of IT security software. The software is incapsulated in “modules”. The modules does consist of pure python code and/or external third programs. Main functions 1 To use a module, run the command “use modulecall”, e.g. “use apsniff...

0.1AI score
SaveExploits0References1
CNVD
CNVD
•added 2017/01/24 12:00 a.m.•13 views

Unspecified Vulnerability in Oracle MySQL Enterprise Monitor

Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost and good reliability.MySQL Enterprise Monitor is an enterprise-level monitoring software designed for MySQL database. A security...

7.2CVSS6.2AI score0.02028EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2017/01/24 12:00 a.m.•47 views

Apache Tomcat 8.5.x < 8.5.8 / 9.0.0.x < 9.0.0.M13 Multiple Vulnerabilities

Binary data 9906.pasl...

7.1CVSS7.2AI score0.39633EPSS
SaveExploits6References2
Tenable Nessus
Tenable Nessus
•added 2017/01/24 12:00 a.m.•46 views

Apache Tomcat 7.0.x < 7.0.70 / 8.0.x < 8.0.36 / 8.5.x < 8.5.3 / 9.x < 9.0.0.M8 Denial of Service

Binary data 700700.pasl...

7.8CVSS8.1AI score0.37171EPSS
SaveExploits0References2
Prion
Prion
•added 2017/01/23 9:59 p.m.•25 views

Xxe

XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file...

4CVSS6.7AI score0.01326EPSS
SaveExploits2References2Affected Software1
NVD
NVD
•added 2017/01/23 9:59 p.m.•29 views

CVE-2015-7743

XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file...

6.5CVSS6.1AI score0.01326EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2017/01/23 9:00 p.m.•34 views

CVE-2015-7743

XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file...

6.1AI score0.01326EPSS
SaveExploits2References2
CVE
CVE
•added 2017/01/23 9:00 p.m.•68 views

CVE-2015-7743

CVE-2015-7743 concerns Paessler PRTG Network Monitor. The vulnerability is an XML External Entity (XXE) expansion flaw in which authenticated users who can create a new HTTP XML/REST Value sensor can read arbitrary files on the PRTG host by supplying crafted XML. Affected versions: before 16.2.23...

6.5CVSS6AI score0.01326EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/23 12:00 a.m.•5 views

CVE-2015-7743: Improper Restriction of XML External Entity Reference

XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file...

6.5CVSS6AI score0.01326EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2017/01/23 12:00 a.m.•3 views

PT-2017-7266

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor versions prior to 16.2.23.3077/3078 Description The issue allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file. This is related to an XML...

6.5CVSS0.01326EPSS
SaveExploits2References4
Prion
Prion
•added 2017/01/20 8:59 a.m.•22 views

Design/Logic Flaw

In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course...

5.8CVSS7AI score0.00977EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2017/01/20 8:59 a.m.•25 views

CVE-2016-5014

In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course...

5.8CVSS6.1AI score0.00977EPSS
SaveExploits0References2
Rows per page
Query Builder