78 matches found
RHEL 6 / 7 : rh-mysql56-mysql (RHSA-2015:1630)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1630 advisory. - mysql: unspecified vulnerability related to Server:GIS CPU July 2015 CVE-2015-2582 - mysql: unspecified vulnerability related to...
CVE-2023-4737
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2...
CVE-2023-4737 SQLi in Hedef Trackings Admin Panel
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2...
CVE-2023-4737
CVE-2023-4737 is an SQL Injection vulnerability affecting Hedef Tracking Admin Panel versions prior to 1.2. The root cause is improper neutralization of special elements in SQL commands, enabling an attacker to manipulate queries. The CVSS 3.1 base score is 9.8 (Network attack, no user interactio...
CVE-2023-4737 SQLi in Hedef Trackings Admin Panel
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2...
CVE-2018-4737
creationtimestamp| type| source ---|---|--- 2023-09-14 22:35:00+00:00| seen| https://t.me/cibsecurity/70518...
SUSE CVE-2015-4737
Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Pluggable Auth...
CVE-2022-4737
creationtimestamp| type| source ---|---|--- 2022-12-25 22:40:10+00:00| seen| https://t.me/cibsecurity/55309...
CVE-2022-4737
The CVE-2022-4737 entry concerns SourceCodester Blood Bank Management System 1.0. The vulnerability affects the login.php handling of the username and password parameters, where manipulation leads to SQL injection. Catalogs in multiple connected documents confirm remote-exploit capability and cla...
CVE-2019-4737
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2019-4737
Summary: IBM DOORS Next Generation (DNG/RRC) vulnerable to cross-site scripting in the Web UI. Affected: DNG/RRD 6.0.2, 6.0.6, 6.0.6.1 (RDNG 6.0.2; DNG 6.0.6/6.0.6.1; RDNG 6.0.6.1). Root cause: cross-site scripting in the web interface could allow injected JavaScript in trusted sessions. Impact: ...
Security Bulletin: Multiple cross-site scripting vulnerabilities affect IBM DOORS Next Generation
Summary There are multiple cross-site scripting defects that affect IBM DOORS Next Generation DNG/RRC Vulnerability Details CVEID: CVE-2019-4740 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code...
Man-in-the-Middle Attack
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. It was found that the MySQL client library permitted but did not require a client to use SSL/TLS when establishing a secure connection to a MySQL server using the "--ssl" option. A man-in-the-middle...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...