60 matches found
CVE-2022-24879 Malfunction of Cross-Site Request Forgery token validation
Shopware is an open source e-commerce software platform. Versions prior to 5.7.9 are vulnerable to malfunction of cross-site request forgery CSRF token validation. Under certain circumstances, the CSRF tokens were not generated anew and not validated correctly. This issue is fixed in version 5.7....
CVE-2022-24873 Non-Stored Cross-site Scripting in Shopware storefront
Shopware is an open source e-commerce software platform. Prior to version 5.7.9, Shopware is vulnerable to non-stored cross-site scripting in the storefront. This issue is fixed in version 5.7.9. Users of older versions may attempt to mitigate the vulnerability by using the Shopware security plug...
CVE-2020-15852
An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated task. This occurs because tssinvalidateiobitmap mishandling causes a loss of synchronization between the I/O bitmaps ...
PT-2020-6010 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.5 through 5.7.9 Description: The issue is related to the tss invalidate io bitmap function in the Linux kernel, which is associated with incorrect default permission settings. An attacker may exploit this to gain...
mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0503...
Oracle MySQL Server <= 5.5.46 / 5.6 <= 5.6.27 / 5.7.9 Security Update (cpujan2016) - Windows
Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-0601
Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Partition...
CVE-2016-0599
Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer...
Design/Logic Flaw
Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer...
Design/Logic Flaw
Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Partition...
UBUNTU-CVE-2016-0601
Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Partition...
CVE-2016-0611
CVE-2016-0611 affects Oracle MySQL Server 5.6.27 and earlier and 5.7.9, with an unspecified vulnerability tied to the Optimizer that could allow remote authenticated users to affect availability. Connected advisories indicate this family of issues is addressed by upgrading to newer MySQL packages...
CVE-2016-0504
CVE-2016-0504 is an unspecified vulnerability in Oracle MySQL Server affecting 5.6.27 and earlier and 5.7.9, allowing remote authenticated users to impact availability via DML-related vectors (different from CVE-2016-0503). The MiracleLinux advisories (AXSA:2016-226/224) enumerate this CVE among ...
CVE-2016-0597
CVE-2016-0597 is an unspecified vulnerability in Oracle MySQL Server and MariaDB affecting the optimizer component that could allow remote authenticated users to cause a denial of service via unknown/optimizer-related vectors. The initial records list vulnerable families across MySQL/MariaDB rele...
CVE-2016-0599
CVE-2016-0599 impacts Oracle MySQL 5.7.9. The description states an unspecified vulnerability that allows remote authenticated users to affect availability via unknown vectors related to the Optimizer. No root-cause, affected subcomponents, versions beyond 5.7.9 or exploit details are provided in...
CVE-2016-0601
Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Partition...
CVE-2016-0599
Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer...
CVE-2016-0606
CVE-2016-0606 is an unspecified vulnerability in Oracle MySQL Server and MariaDB related to encryption that can be exploited by remote authenticated users to affect integrity. Affected versions include MySQL 5.5.46 and earlier, 5.6.27 and earlier, 5.7.9 and MariaDB before 5.5.47; also 10.0.x befo...
CVE-2016-0601
CVE-2016-0601 involves Oracle MySQL 5.7.9 with an unspecified vulnerability that allows remote authenticated users to affect availability via unknown vectors related to Partition. The base severity in the provided metrics is LOW (CVSS v2: 3.5) with network attack vector, medium complexity, and si...
