Lucene search
+L

95 matches found

Vulnrichment
Vulnrichment
added 2023/02/26 12:0 a.m.10 views

CVE-2021-3329 DOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layer

Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stack...

9.6CVSS9.3AI score0.00616EPSS
SaveExploits1References1
F5 Networks
F5 Networks
added 2023/02/21 6:55 p.m.71 views

K35239571: PHP vulnerability CVE-2015-3329

Security Advisory Description Multiple stack-based buffer overflows in the pharsetinode function in pharinternal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a 1 tar, 2 phar, or 3 ZIP archive...

7.5CVSS8.2AI score0.38434EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.42 views

Mageia: Security Advisory (MGASA-2015-0169)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.1AI score0.38434EPSS
SaveExploits3References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2017:1137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS6.7AI score0.04905EPSS
SaveExploits0References9
Veracode
Veracode
added 2019/05/02 5:39 a.m.54 views

Buffer Overflow

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits44References35Affected Software6
Tenable Nessus
Tenable Nessus
added 2017/06/20 12:0 a.m.44 views

Ubuntu 16.04 LTS : Linux kernel (GKE) vulnerability (USN-3329-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3329-1 advisory. It was discovered that the stack guard page for processes in the Linux kernel was not sufficiently large enough to prevent overlapping with the heap. An attacker...

7.4CVSS8.2AI score0.05186EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2017/05/09 12:0 a.m.34 views

openSUSE: Security Advisory for mysql-community-server (openSUSE-SU-2017:1209-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.1AI score0.89924EPSS
SaveExploits7References1
Tenable Nessus
Tenable Nessus
added 2017/05/09 12:0 a.m.45 views

openSUSE Security Update : mysql-community-server (openSUSE-2017-555) (Riddle)

This update for mysql-community-server to version 5.6.36 fixes the following issues : These security issues were fixed : - CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands bsc1029014 -...

7.8CVSS6.8AI score0.89924EPSS
SaveExploits7References23
OPENSUSE Linux
OPENSUSE Linux
added 2017/05/08 6:18 p.m.72 views

Security update for mysql-community-server (important)

This update for mysql-community-server to version 5.6.36 fixes the following issues: These security issues were fixed: - CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands bsc1029014 -...

7.8CVSS0.8AI score0.89924EPSS
SaveExploits7References6
Debian
Debian
added 2017/04/25 3:15 p.m.57 views

[SECURITY] [DSA 3834-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3834-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 25, 2017 https://www.debian.org/security/faq -...

7.7CVSS7AI score0.04905EPSS
SaveExploits0
OSV
OSV
added 2017/04/24 7:59 p.m.18 views

CVE-2017-3329

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Thread Pooling. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via...

7.5CVSS6.3AI score
SaveExploits0References4
CVE
CVE
added 2017/04/24 7:0 p.m.124 views

CVE-2017-3329

CVE-2017-3329 affects Oracle MySQL Server (Server: Thread Pooling). Affected versions are 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The issue allows an unauthenticated attacker with network access via multiple protocols to cause the MySQL Server to hang or crash (complete Do...

7.5CVSS6.7AI score0.03743EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2017/04/24 12:0 a.m.3 views

UBUNTU-CVE-2017-3329

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Thread Pooling. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via...

7.5CVSS7AI score0.03743EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2017/04/20 12:0 a.m.475 views

MySQL 5.6.x < 5.6.36 Multiple Vulnerabilities (April 2017 CPU) (July 2017 CPU) (Riddle)

The version of MySQL running on the remote host is 5.6.x prior to 5.6.36. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the mysqlprunestmtlist function in client.c that allows an authenticated, remote attacker to cause a denial of service condition...

7.8CVSS7.6AI score0.89924EPSS
SaveExploits8References25
OpenVAS
OpenVAS
added 2016/08/10 12:0 a.m.61 views

Microsoft Internet Explorer Multiple Vulnerabilities (3177356)

This host is missing a critical security update according to Microsoft Bulletin MS16-095. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.6CVSS6.1AI score0.51804EPSS
SaveExploits4References2
OSV
OSV
added 2016/08/09 9:59 p.m.1 views

CVE-2016-3329

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Internet Explorer Information Disclosure Vulnerability."...

5.3CVSS5.8AI score0.14189EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2016/08/09 12:0 a.m.52 views

MS16-096: Cumulative Security Update for Microsoft Edge (3177358)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3177358. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to a failure to properly access objects in memory. A remote attacke...

9.3CVSS7.7AI score0.18537EPSS
SaveExploits1References9
F5 Networks
F5 Networks
added 2016/07/05 12:0 a.m.75 views

SOL35239571 - PHP vulnerability CVE-2015-3329

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

7.5CVSS2.5AI score0.38434EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.52 views

Oracle: Security Advisory (ELSA-2015-1218)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.3AI score0.50129EPSS
SaveExploits30References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.63 views

Oracle: Security Advisory (ELSA-2015-1135)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9AI score0.53166EPSS
SaveExploits56References2
Rows per page
Query Builder