Lucene search
+L

271 matches found

Mend
Mend
•added 2019/01/16 7:00 p.m.•4 views

CVE-2019-2503

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Connection Handling. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access to the physical...

6.4CVSS0.02507EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/16 12:00 a.m.•7 views

CVE-2019-2503: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Connection Handling. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access to the physical...

6.4CVSS5.7AI score0.02507EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/10/17 12:00 a.m.•4 views

PT-2018-2395

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.6.42 and prior Oracle MySQL versions 5.7.24 and prior Oracle MySQL versions 8.0.13 and prior Description The issue is related to insufficient access control in the MySQL Server component, specifically in the Server:...

6.4CVSS0.02507EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2018/10/16 7:49 p.m.•50 views

AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication

The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging...

9.1CVSS5.4AI score0.08919EPSS
SaveExploits0References7Affected Software2
osv_ghsa
osv_ghsa
•added 2018/10/16 7:49 p.m.•31 views

GHSA-Q66C-H853-GQW2 AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication

The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging...

9.1CVSS5.9AI score0.08919EPSS
SaveExploits0References7
Veracode
Veracode
•added 2018/08/14 4:05 a.m.•34 views

Denial Of Service (DoS)

libvirt.so is vulnerable to denial of service DoS attacks. The library contains a race condition when handling the keepalive initialization requests, allowing a malicious user to cause the library to crash by closing the connection before the keepalive request is sent...

3.3CVSS5.7AI score0.02343EPSS
SaveExploits0References27Affected Software2
Prion
Prion
•added 2018/07/11 12:29 a.m.•22 views

Denial of service

A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol FTP connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

7.8CVSS7.2AI score0.11813EPSS
SaveExploits0References3Affected Software5
osv_usn
osv_usn
•added 2017/10/11 12:01 p.m.•15 views

USN-3451-1 swift vulnerabilities

It was discovered that OpenStack Swift incorrectly handled tempurls. A remote authenticated user in possession of a tempurl key authorized for PUT could retrieve other objects in the same Swift account. CVE-2015-5223 Romain Le Disez and Örjan Persson discovered that OpenStack Swift incorrectly...

7.5CVSS7.1AI score0.03852EPSS
SaveExploits0References4
Prion
Prion
•added 2017/05/22 1:29 a.m.•24 views

Design/Logic Flaw

A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to disable TCP ports and cause a denial of service DoS condition on an affected system. The vulnerability is due to a lack of rate-limiting...

7.8CVSS7.5AI score0.02394EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•18 views

Windows DoS

The Windows operating system contains a vulnerability related to errors in handling iSCSI connections. Exploiting this vulnerability can lead to service failures...

5CVSS5.4AI score0.41784EPSS
SaveExploits0References4
Prion
Prion
•added 2016/06/01 8:59 p.m.•27 views

Authentication flaw

The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging...

5CVSS7.3AI score0.08919EPSS
SaveExploits0References7Affected Software1
UbuntuCve
UbuntuCve
•added 2016/06/01 8:59 p.m.•28 views

CVE-2016-4432

The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging...

9.1CVSS7.2AI score0.08919EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2016/06/01 8:00 p.m.•46 views

CVE-2016-4432

The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging...

9.3AI score0.08919EPSS
SaveExploits0References7
Mend
Mend
•added 2016/06/01 8:00 p.m.•8 views

CVE-2016-4432

The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging...

9.3CVSS0.08919EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2016/06/01 12:00 a.m.•15 views

PT-2016-5956 · Apache · Apache Qpid Java

Name of the Vulnerable Software and Affected Versions: Apache Qpid Java versions prior to 6.0.3 Description: The issue concerns the AMQP 0-8, 0-9, 0-91, and 0-10 connection handling, which might allow remote attackers to bypass authentication. This could enable attackers to perform actions via...

9.1CVSS9AI score0.08919EPSS
SaveExploits0References14
RedhatCVE
RedhatCVE
•added 2016/05/30 10:48 a.m.•27 views

CVE-2016-4432

The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging. Mitigation If upgrading is not possible, the vulnerability can be mitigate...

9.1CVSS2.4AI score0.08919EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2015/09/08 12:00 a.m.•29 views

Amazon Linux: Security Advisory (ALAS-2015-556)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.08436EPSS
SaveExploits0References2
Amazon
Amazon
•added 2015/07/07 12:00 a.m.•56 views

Medium: postgresql8

Issue Overview: A double-free flaw was found in the connection handling. An unauthenticated attacker could exploit this flaw to crash the PostgreSQL back end by disconnecting at approximately the same time as the authentication time out is triggered. CVE-2015-3165 It was discovered that PostgreSQ...

9.8CVSS8.7AI score0.08436EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2015/07/03 12:00 a.m.•39 views

CentOS Update for postgresql CESA-2015:1194 centos6

Check the version of postgresql SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882214";...

9.8CVSS8.2AI score0.08436EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2015/06/29 4:09 p.m.•43 views

Moderate: Red Hat Security Advisory: postgresql92-postgresql security update

Updated postgresql92-postgresql packages that fix three security issues are now available for Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

9.8CVSS7AI score0.08436EPSS
SaveExploits0References4
Rows per page
Query Builder