Lucene search
K

7 matches found

CNVD
CNVD
added 2026/01/30 12:0 a.m.2 views

Unspecified Vulnerability in Oracle MySQL (CNVD-2026-16630)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server versions 9.0.0 through 9.5.0, which can be exploited by attackers to cause a denial ...

6.5CVSS5.8AI score0.00068EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 6:12 a.m.6 views

CVE-2017-16630

In SapphireIMS 40971, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference IDOR in the local user creation function...

8.8CVSS6.7AI score0.00324EPSS
Exploits0References1
Circl
Circl
added 2021/09/21 12:27 a.m.1 views

CVE-2020-16630

creationtimestamp| type| source ---|---|--- 2021-09-21 00:27:13+00:00| seen| https://t.me/cibsecurity/29166...

6.8CVSS6.5AI score0.00137EPSS
Exploits1References1
CVE
CVE
added 2021/09/20 7:20 p.m.43 views

CVE-2020-16630

The CVE-2020-16630 entry concerns TI’s BLE stack, where the Long-Term Key (LTK) property is cached and reused for bonded devices. A LTK can be unauthenticated (Just Works) or authenticated (Passkey Entry, Numeric Comparison, or OOB). If a victim mobile securely paired with a TI BLE device generat...

6.8CVSS6.5AI score0.00137EPSS
Exploits1References2Affected Software7
Circl
Circl
added 2021/08/12 12:38 a.m.5 views

CVE-2017-16630

creationtimestamp| type| source ---|---|--- 2021-08-12 00:38:53+00:00| seen| https://t.me/cibsecurity/27193...

8.8CVSS8.1AI score0.00324EPSS
Exploits0References1
CVE
CVE
added 2021/08/11 8:9 p.m.45 views

CVE-2017-16630

SapphireIMS 4097_1 is affected by CVE-2017-16630 due to an insecure direct object reference (IDOR) in the local user creation function. A guest user can create a local administrator account on any system with SapphireIMS installed, enabling privilege elevation. The issue is caused by insufficient...

8.8CVSS8.4AI score0.00324EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2018/12/28 5:0 p.m.42 views

CVE-2018-16630

Kirby CMS, version 2.5.12, is affected by a Cross‑Site Scripting (XSS) vulnerability involving the Upload SVG option in the “site files” feature. The issue arises from insufficient validation when uploading SVG files, enabling attacker‑supplied SVG content to be processed in a way that triggers X...

4.8CVSS4.8AI score0.00235EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder