Lucene search
+L

91 matches found

Cvelist
Cvelist
•added 2024/02/02 8:31 p.m.•39 views

CVE-2024-1193 Navicat MySQL Conecction denial of service

A vulnerability was found in Navicat 12.0.29. It has been rated as problematic. This issue affects some unknown processing of the component MySQL Conecction Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

3.3CVSS5.7AI score0.00348EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/02/02 12:00 a.m.•22 views

Navicat Security Breach

Navicat is a database management tool from Navicat, Inc. designed to provide a visual user interface to make it easier for users to manage database design, development and maintenance. A security vulnerability exists in Navicat version 12.0.29, which originates from the component MySQL Conecction...

5.5CVSS6.5AI score0.00348EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/02 12:00 a.m.•6 views

CVE-2024-1193: Improper Resource Shutdown or Release

A vulnerability was found in Navicat 12.0.29. It has been rated as problematic. This issue affects some unknown processing of the component MySQL Conecction Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

5.5CVSS5.2AI score0.00348EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/02/02 12:00 a.m.•25 views

PT-2024-17351 · Navicat · Navicat

Name of the Vulnerable Software and Affected Versions: Navicat version 12.0.29 Description: A vulnerability was found in the MySQL Connection Handler component of Navicat, which can lead to denial of service. The manipulation requires a local attack. The exploit has been disclosed to the public a...

5.5CVSS6.7AI score0.00348EPSS
SaveExploits1References9
osv_cve
osv_cve
•added 2024/01/30 2:15 p.m.•24 views

CVE-2024-1032

A vulnerability classified as critical was found in openBI up to 1.0.8. Affected by this vulnerability is the function testConnection of the file /application/index/controller/Databasesource.php of the component Test Connection Handler. The manipulation leads to deserialization. The attack can be...

9.8CVSS5.3AI score0.00765EPSS
SaveExploits0References3
Prion
Prion
•added 2024/01/30 2:15 p.m.•35 views

Deserialization of untrusted data

A vulnerability classified as critical was found in openBI up to 1.0.8. Affected by this vulnerability is the function testConnection of the file /application/index/controller/Databasesource.php of the component Test Connection Handler. The manipulation leads to deserialization. The attack can be...

7.5CVSS7.2AI score0.00765EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2024/01/30 1:31 p.m.•7 views

CVE-2024-1032

A vulnerability classified as critical was found in openBI up to 1.0.8. Affected by this vulnerability is the function testConnection of the file /application/index/controller/Databasesource.php of the component Test Connection Handler. The manipulation leads to deserialization. The attack can be...

9.8CVSS0.00765EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/01/30 1:31 p.m.•18 views

CVE-2024-1032 openBI Test Connection Databasesource.php testConnection deserialization

A vulnerability classified as critical was found in openBI up to 1.0.8. Affected by this vulnerability is the function testConnection of the file /application/index/controller/Databasesource.php of the component Test Connection Handler. The manipulation leads to deserialization. The attack can be...

7.5CVSS7AI score0.00765EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/30 12:00 a.m.•7 views

CVE-2024-1032: Deserialization of Untrusted Data

A vulnerability classified as critical was found in openBI up to 1.0.8. Affected by this vulnerability is the function testConnection of the file /application/index/controller/Databasesource.php of the component Test Connection Handler. The manipulation leads to deserialization. The attack can be...

9.8CVSS5.1AI score0.00765EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/01/25 10:15 p.m.•16 views

CVE-2024-0887

A vulnerability, which was classified as problematic, has been found in Mafiatic Blue Server 1.1. Affected by this issue is some unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...

7.5CVSS5AI score0.01117EPSS
SaveExploits1References3
NVD
NVD
•added 2024/01/25 10:15 p.m.•22 views

CVE-2024-0887

A vulnerability, which was classified as problematic, has been found in Mafiatic Blue Server 1.1. Affected by this issue is some unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...

7.5CVSS6AI score0.01117EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/25 10:15 p.m.•29 views

Information disclosure

A vulnerability, which was classified as problematic, has been found in Mafiatic Blue Server 1.1. Affected by this issue is some unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...

5CVSS7AI score0.01117EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/25 10:00 p.m.•9 views

CVE-2024-0887 Mafiatic Blue Server Connection denial of service

A vulnerability, which was classified as problematic, has been found in Mafiatic Blue Server 1.1. Affected by this issue is some unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...

5.3CVSS7.5AI score0.01117EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/25 10:00 p.m.•51 views

CVE-2024-0887

The CVE-2024-0887 entry affects Mafiatic Blue Server 1.1, specifically the Connection Handler component. Affected functionality allows remote exploitation to cause denial of service. The vulnerability is publicly disclosed (VDB-252038), with exploit details referenced in multiple sources. Exploit...

7.5CVSS7.4AI score0.01117EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/25 12:00 a.m.•15 views

PT-2024-15892 · Unknown · Mafiatic Blue Server

Name of the Vulnerable Software and Affected Versions: Mafiatic Blue Server version 1.1 Description: A problematic issue has been found in the Connection Handler component, leading to denial of service. The attack can be launched remotely. The issue affects some unknown functionality of the...

7.5CVSS7AI score0.01117EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/25 12:00 a.m.•4 views

CVE-2024-0887: Improper Resource Shutdown or Release

A vulnerability, which was classified as problematic, has been found in Mafiatic Blue Server 1.1. Affected by this issue is some unknown functionality of the component Connection Handler. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...

7.5CVSS5.8AI score0.01117EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/25 12:00 a.m.•17 views

Blue Server Security Vulnerability

Blue Server is a WAMP package that allows you to run a web server with Apache, MySQL, PHP and phpMyAdmin on any Microsoft Windows operating system. A security vulnerability exists in Blue Server version 1.1, which stems from the component Connection Handler that can cause a denial of service...

7.5CVSS6.6AI score0.01117EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2023/12/11 10:37 p.m.•82 views

CVE-2023-49805 Uptime Kuma Missing Origin Validation in WebSockets

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, the application uses WebSocket with Socket.io, but it does not verify that the source of communication is valid. This allows third-party website to access the application on behalf of their client. When connecting...

6CVSS8.6AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/29 12:00 a.m.•8 views

CVE-2022-36437: Session Fixation

The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the cluster with the identity of another already authenticated connection. The affected Hazelcast versions are through 4.0.6, 4.1.9, 4.2.5, 5.0.3, and 5.1.2. The affecte...

9.1CVSS5.8AI score0.01049EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/12/27 2:40 p.m.•63 views

Hazelcast connection caching

Impact The Connection handler in Hazelcast and Hazelcast Jet allows an unauthenticated, remote attacker to access and manipulate data in the cluster with another authenticated connection's identity. The affected Hazelcast versions are through 3.12.12, 4.0.6, 4.1.9, 4.2.5, 5.0.3, and 5.1.2. The...

9.1CVSS8.8AI score0.01049EPSS
SaveExploits0References4Affected Software4
Rows per page
Query Builder