Lucene search
+L

4976 matches found

CNVD
CNVD
added 2016/10/16 12:00 a.m.10 views

Apache Tomcat JK ISAPI Connector Buffer Overflow Vulnerability

Apache Tomcat JK ISAPI Connector is a module for Apache or IIS to connect to the backend Tomcat , which supports clustering and load balancing and so on. A buffer overflow vulnerability exists in Apache Tomcat JK ISAPI Connector, which allows remote attackers to send specially crafted URIs to the...

9.8CVSS8AI score0.18989EPSS
SaveExploits1References1
Apache Tomcat
Apache Tomcat
added 2016/10/06 12:00 a.m.41 views

Fixed in Apache Tomcat JK Connector 1.2.42

Moderate: Buffer Overflow CVE-2016-6808 The IIS/ISAPI specific code implements special handling when a virtual host is present. The virtual host name and the URI are concatenated to create a virtual host mapping rule. The length checks prior to writing to the target buffer for this rule did not...

9.8CVSS7.6AI score0.18989EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/09/15 12:00 a.m.42 views

openSUSE Security Update : mysql-connector-java (openSUSE-2016-1082)

mysql-connector-java was updated to 5.1.35, fixing multiple bugs and a security issues. - CVE-2015-2575: Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

4.9CVSS7.9AI score0.03564EPSS
SaveExploits0References3
OSV
OSV
added 2016/09/07 11:48 a.m.10 views

SUSE-SU-2016:2259-1 Security update for mysql-connector-java

mysql-connector-java was updated to 5.1.35, fixing multiple bugs and a security issues. - CVE-2015-2575: Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

4.9CVSS5.4AI score0.03564EPSS
SaveExploits0References3
Citrix
Citrix
added 2016/08/17 12:00 a.m.16 views

How to debug Citrix Gateway connector logs (XNC)

In order to determine an issue with Citrix Gateway connector formerly known as XNC, we would need to enable debug logging...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/07/19 12:00 a.m.38 views

Debian DSA-3621-1 : mysql-connector-java - security update

A vulnerability was discovered in mysql-connector-java, a Java database JDBC driver for MySQL, which may result in unauthorized update, insert or delete access to some MySQL Connectors accessible data as well as read access to a subset of MySQL Connectors accessible data. The vulnerability was...

4.9CVSS7.3AI score0.03564EPSS
SaveExploits0References5
Debian
Debian
added 2016/07/18 4:31 p.m.93 views

[SECURITY] [DSA 3621-1] mysql-connector-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3621-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 18, 2016 https://www.debian.org/security/faq -...

4.9CVSS8.5AI score0.03564EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2016/07/18 12:00 a.m.29 views

Debian Security Advisory DSA 3621-1 (mysql-connector-java - security update)

A vulnerability was discovered in mysql-connector-java, a Java database JDBC driver for MySQL, which may result in unauthorized update, insert or delete access to some MySQL Connectors accessible data as well as read access to a subset of MySQL Connectors accessible data. The vulnerability was...

4.9CVSS0.1AI score0.03564EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2016/07/17 12:00 a.m.25 views

Debian: Security Advisory (DSA-3621-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.9CVSS9.5AI score0.03564EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:00 a.m.11 views

The vulnerability of the InfoSphere Information Server software platform, which allows a perpetrator to circumvent existing access control rules

The vulnerability of the Connector Migration Tool component of the InfoSphere Information Server software platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions related to data creation and...

5.5CVSS5.5AI score0.01048EPSS
SaveExploits0References3Affected Software1
exploitpack
exploitpack
added 2016/07/07 12:00 a.m.17 views

Tiki Wiki 15.1 - File Upload

Tiki Wiki 15.1 - File Upload !/usr/bin/python недействительный 31337 Team p4yl04d = https://bethebeast.pl/?p=953 ::ch4n6e 1p:: import requests import json from requests.auth import HTTPBasicAuth url = 'http://192.168.1.152:8080/tiki/vendorextra/elfinder/php/connector.minimal.php' headers = 'Host'...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:00 a.m.11 views

The vulnerability of WebLogic Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the Oracle WebLogic Server component of the Oracle Fusion Middleware allows malicious actors to compromise the confidentiality, integrity, and accessibility of data by using the WebLogic Tuxedo Connector...

6.8CVSS5.5AI score0.01339EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/06/27 12:00 a.m.38 views

Debian DLA-526-1 : mysql-connector-java security update

A vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J has been discovered that may result in unauthorized update, insert or delete access to some MySQL Connectors accessible data as well as read access to a subset of MySQL Connectors. The issue is addressed b...

4.9CVSS7.9AI score0.03564EPSS
SaveExploits0References4
Debian
Debian
added 2016/06/25 4:56 p.m.92 views

[SECURITY] [DLA 526-1] mysql-connector-java security update

Package : mysql-connector-java Version : 5.1.39-1deb7u1 CVE ID : CVE-2015-2575 A vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J has been discovered that may result in unauthorized update, insert or delete access to some MySQL Connectors accessible data a...

4.9CVSS6.9AI score0.03564EPSS
SaveExploits0
OSV
OSV
added 2016/06/25 12:00 a.m.26 views

DLA-526-1 mysql-connector-java - security update

Bulletin has no description...

4.9CVSS9.1AI score0.03564EPSS
SaveExploits0
OSV
OSV
added 2016/05/16 10:59 a.m.8 views

UBUNTU-CVE-2015-3152

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C aka libmysqlclient before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack...

5.9CVSS6.7AI score0.07083EPSS
SaveExploits1References5
Symantec
Symantec
added 2016/05/09 8:00 a.m.77 views

SA123 : OpenSSL Vulnerabilities 3-May-2016

SUMMARY Blue Coat products using affected versions of OpenSSL are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to intercept and decrypt TLS sessions, obtain arbitrary data from the target's memory stack, or execute arbitrary code through buffer...

10CVSS2.7AI score0.89058EPSS
SaveExploits9Affected Software25
Tenable Nessus
Tenable Nessus
added 2016/05/09 12:00 a.m.665 views

RHEL 7 : Red Hat JBoss Enterprise Application Platform 6.4.7 update (Moderate) (RHSA-2016:0597)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0597 advisory. - tomcat: non-persistent DoS attack by feeding data by aborting an upload CVE-2014-0230 - EAP: HTTPS NIO connector uses no timeout when...

7.8CVSS6.5AI score0.20318EPSS
SaveExploits0References17
OSV
OSV
added 2016/05/06 5:59 p.m.9 views

CVE-2016-2094

The HTTPS NIO Connector allows remote attackers to cause a denial of service thread consumption by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability...

7.5CVSS5.8AI score0.02646EPSS
SaveExploits0References6
NVD
NVD
added 2016/05/06 5:59 p.m.32 views

CVE-2016-2094

The HTTPS NIO Connector allows remote attackers to cause a denial of service thread consumption by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability...

7.5CVSS7.3AI score0.02646EPSS
SaveExploits0References6
Rows per page
Query Builder