7 matches found
Unspecified Vulnerability in Oracle MySQL (CNVD-2026-16630)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server versions 9.0.0 through 9.5.0, which can be exploited by attackers to cause a denial ...
CVE-2017-16630
In SapphireIMS 40971, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference IDOR in the local user creation function...
CVE-2020-16630
creationtimestamp| type| source ---|---|--- 2021-09-21 00:27:13+00:00| seen| https://t.me/cibsecurity/29166...
CVE-2020-16630
The CVE-2020-16630 entry concerns TI’s BLE stack, where the Long-Term Key (LTK) property is cached and reused for bonded devices. A LTK can be unauthenticated (Just Works) or authenticated (Passkey Entry, Numeric Comparison, or OOB). If a victim mobile securely paired with a TI BLE device generat...
CVE-2017-16630
creationtimestamp| type| source ---|---|--- 2021-08-12 00:38:53+00:00| seen| https://t.me/cibsecurity/27193...
CVE-2017-16630
SapphireIMS 4097_1 is affected by CVE-2017-16630 due to an insecure direct object reference (IDOR) in the local user creation function. A guest user can create a local administrator account on any system with SapphireIMS installed, enabling privilege elevation. The issue is caused by insufficient...
CVE-2018-16630
Kirby CMS, version 2.5.12, is affected by a Cross‑Site Scripting (XSS) vulnerability involving the Upload SVG option in the “site files” feature. The issue arises from insufficient validation when uploading SVG files, enabling attacker‑supplied SVG content to be processed in a way that triggers X...