18 matches found
EUVD-2026-21589
goshs is Missing Write Protection for Parametric Data Values...
NCSC-2025-0062
creationtimestamp| type| source ---|---|--- 2025-02-19 06:59:03+00:00| seen| https://supportportal.juniper.net/s/article/2025-02-Out-of-Cycle-Security-Bulletin-Session-Smart-Router-Session-Smart-Conductor-WAN-Assurance-Router-API-Authentication-Bypass-Vulnerability-CVE-2025-21589...
Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication
Juniper Networks has released security updates to address a critical security flaw impacting Session Smart Router, Session Smart Conductor, and WAN Assurance Router products that could be exploited to hijack control of susceptible devices. Tracked as CVE-2025-21589 , the vulnerability carries a...
VulnCheck KEV: CVE-2022-21589
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
CVE-2024-21589 Paragon Active Assurance Control Center: Information disclosure vulnerability
An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated network-based attacker to access reports without authenticating, potentially containing sensitive configuration information. A feature was introduced in version 3.1.0...
CVE-2024-21589
The CVE affects Juniper Networks Paragon Active Assurance Control Center. It is an Improper Access Control vulnerability that allows an unauthenticated network-based attacker to access reports (potentially exposing sensitive configuration data). Affected versions are 3.1.0, 3.2.0, 3.2.2, 3.3.0, 3...
Oracle Solaris Critical Patch Update : jul2023_SRU11_4_57_144_3
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Device Driver Interface. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker...
CVE-2023-21589
Adobe InDesign is affected by a font parsing out-of-bounds write vulnerability (CVE-2023-21589) that could allow arbitrary code execution in the context of the current user. Affected versions include InDesign 18.0 and earlier and 17.4 and earlier; exploitation requires user interaction (opening a...
Ubuntu 16.04 ESM : MySQL vulnerabilities (USN-5696-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5696-2 advisory. USN-5696-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the precedin...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : MySQL vulnerabilities (USN-5696-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5696-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL...
Ubuntu: Security Advisory (USN-5696-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle MySQL Server <= 5.7.39 / 8.0 <= 8.0.16 Security Update (cpuoct2022) - Linux
Oracle MySQL Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Oracle MySQL Server <= 5.7.39 / 8.0 <= 8.0.16 Security Update (cpuoct2022) - Windows
Oracle MySQL Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2022-21589
creationtimestamp| type| source ---|---|--- 2022-10-19 00:14:37+00:00| seen| https://t.me/cibsecurity/51708...
CVE-2022-21589 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2022-21589
CVE-2022-21589 affects Oracle MySQL Server (Server: Security: Privileges). Affected versions are 5.7.39 and earlier, and 8.0.16 and earlier. The vulnerability allows a low-privileged, network-accessible attacker to read a subset of MySQL Server data. The description does not provide a patch/versi...
CVE-2021-21589
The CVE affects Dell EMC Unity, Unity XT, and UnityVSA prior to 5.1.0.0.5.394, where the system does not exit on failed Initialization. A local authenticated Service user could potentially escalate privileges, giving partial confidentiality/integrity/availability impact. Vulnerable component: ini...
Unfixed Frame Redirect vulnerability at www.aspindir.com
Security researcher St@rExT, has submitted on 03/06/2007 a Frame Redirect vulnerability affecting www.aspindir.com, which at the time of submission ranked 21589 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/06/2007. It is currently unfixed...