Lucene search
+L

1371 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 2:16 p.m.10 views

CVE-2020-2837

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing...

8.2CVSS7.2AI score0.01282EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/05 6:50 a.m.12 views

CVE-2024-50572

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.2, SCALANCE...

8.6CVSS6.7AI score0.00648EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:8 p.m.12 views

Security Bulletin: There is a Denial of Service vulnerability in IBM WebSphere Liberty that is shipped with IBM TXSeries for Multiplatforms (CVE-2024-7254).

Summary There is a Denial of Service vulnerability in IBM WebSphere Liberty that is shipped with IBM TXSeries for Multiplatforms CVE-2024-7254. An update to IBM TXSeries for Multiplatforms has been released to address this vulnerability. Vulnerability Details CVEID:CVE-2024-7254 DESCRIPTION: Goog...

8.7CVSS7.7AI score0.02772EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:8 p.m.33 views

Security Bulletin: IBM Datapower Operations Dashboard could allow a remote attacker to execute arbitrary code on the system CVE-2024-38474

Summary Apache HTTP Server is used by the IBM Datapower Operations Dashboard implementation of their networking implementation Vulnerability Details CVEID:CVE-2024-38474 DESCRIPTION: Apache HTTP Server could allow a remote attacker to execute arbitrary code on the system, caused by a substitution...

9.8CVSS7.5AI score0.02456EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2025/01/28 12:21 a.m.10 views

Moderate: Red Hat Bug Fix Advisory: kernel bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. RHEL-34520 RHEL-55430 RHEL-12685 RHEL-52915...

7.1CVSS6.7AI score0.00139EPSS
SaveExploits0
OSV
OSV
added 2024/12/12 10:2 a.m.21 views

RHSA-2024:10951 Red Hat Security Advisory: php:8.2 security update

Bulletin has no description...

7.5CVSS6.5AI score0.3786EPSS
SaveExploits5References35
OSV
OSV
added 2024/12/12 10:2 a.m.20 views

RHSA-2024:10949 Red Hat Security Advisory: php:8.2 security update

Bulletin has no description...

7.5CVSS6.5AI score0.3786EPSS
SaveExploits5References35
Oracle linux
Oracle linux
added 2024/12/11 12:0 a.m.260 views

php:8.2 security update

php 8.2.25-1 - rebase to 8.2.25 RHEL-65837 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd php-pecl-xdebug3 3.2.2-2 - drop inetntoa usage using upstream patch 3.2.2-1 - update to 3.2.2 for PHP 8.2 RHEL-14699 php-pecl-zip 1.22.3-1 - update to 1.22.3 for PHP 8.2...

7.5CVSS7.3AI score0.3786EPSS
SaveExploits5
Cvelist
Cvelist
added 2024/12/02 2:49 p.m.86 views

CVE-2024-10905 IdentityIQ Improper Access Control VulnerabilityIdentityIQ Improper Access Control Vulnerability

IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allow HTTP/HTTPS access to static content in the IdentityIQ application directory that should be protected...

10CVSS0.00954EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/27 7:20 p.m.15 views

BIT-PHP-2024-11233 Single byte overread with convert.quoted-printable-decode filter

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

8.2CVSS7.3AI score0.01618EPSS
SaveExploits1References4
OSV
OSV
added 2024/11/27 7:18 p.m.18 views

BIT-PHP-2024-8929 Leak partial content of the heap through heap buffer over-read in mysqlnd

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server...

5.8CVSS7.6AI score0.02286EPSS
SaveExploits1References4
OSV
OSV
added 2024/11/26 12:0 a.m.23 views

DSA-5819-1 php8.2 - security update

Bulletin has no description...

9.8CVSS7.5AI score0.02286EPSS
SaveExploits4
OSV
OSV
added 2024/11/24 1:15 a.m.2 views

DEBIAN-CVE-2024-11236

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, uncontrolled long string inputs to ldapescape function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write...

9.8CVSS6.3AI score0.02079EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2024/11/24 1:8 a.m.22 views

CVE-2024-11233

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, due to an error in convert.quoted-printable-decode filter certain data can lead to buffer overread by one byte, which can in certain circumstances lead to crashes or disclose content of other memory areas...

8.2CVSS6.1AI score0.01618EPSS
SaveExploits1
CVE
CVE
added 2024/11/24 12:44 a.m.495 views

CVE-2024-11236

CVE-2024-11236 affects PHP versions with ldap_escape() on 32-bit systems where uncontrolled long inputs can overflow an integer, causing an out-of-bounds write. Affected are PHP 8.1.x before 8.1.31, 8.2.x before 8.2.26, and 8.3.x before 8.3.14. The issue is described in multiple sources, includin...

9.8CVSS9.4AI score0.02079EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2024/11/24 12:0 a.m.5 views

PHP 安全漏洞

PHP is a scripting language in which PHP is executed server-side. PHP has a security vulnerability. An attacker exploiting this vulnerability could cause the buffer to over-read a byte, which could result in a crash or leak the contents of other memory areas. The following versions are affected:...

8.2CVSS5.6AI score0.01618EPSS
SaveExploits1References3
AstraLinux
AstraLinux
added 2024/11/23 3:4 a.m.5 views

Astra Linux – Vulnerability in PHP 8.2

In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, and 8.3. before 8.3.12, when using PHP-FPM SAPI and the option catchworkersoutput is set to yes, it is possible to manipulate the log messages by removing up to 4 characters from the log messages. Additionally, if PHP-FPM is configured to us...

3.3CVSS6.7AI score0.00483EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/11/22 6:15 a.m.30 views

CVE-2024-8929 Leak partial content of the heap through heap buffer over-read in mysqlnd

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server...

5.8CVSS0.02286EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2024/11/22 6:15 a.m.18 views

CVE-2024-8929

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server...

5.8CVSS6.9AI score0.02286EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2024/11/22 6:15 a.m.16 views

CVE-2024-8929

In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server...

5.8CVSS6.3AI score0.02286EPSS
SaveExploits1
Rows per page
Query Builder