Lucene search
+L

6820 matches found

Cvelist
Cvelist
•added 2020/05/20 6:48 p.m.•34 views

CVE-2020-13249

libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadblib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle...

8.7AI score0.02396EPSS
SaveExploits0References6
Mend
Mend
•added 2020/05/20 6:48 p.m.•4 views

CVE-2020-13249

libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadblib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle...

8.8CVSS0.02396EPSS
SaveExploits0References12
AlpineLinux
AlpineLinux
•added 2020/05/20 6:48 p.m.•78 views

CVE-2020-13249

libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadblib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle...

8.8CVSS8.9AI score0.02396EPSS
SaveExploits0
CVE
CVE
•added 2020/05/20 6:48 p.m.•460 views

CVE-2020-13249

The CVE-2020-13249 issue affects the MariaDB Connector-C (MariaDB Native Client library). It concerns the library’s handling of OK packets from the server, where content was not properly validated. This improper validation is identified in the connector-c before version 3.1.8. Public advisories (...

8.8CVSS8.6AI score0.02396EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2020/05/20 6:48 p.m.•33 views

CVE-2020-13249

Removed by vendor...

8.8CVSS7.7AI score0.02396EPSS
SaveExploits0
Cisco
Cisco
•added 2020/05/20 4:00 p.m.•75 views

Cisco AMP for Endpoints Mac Connector Software File Scan Denial of Service Vulnerability

A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files, resulting in a restart of the AMP Connector and a denial of service DoS condition of the Cisco AMP for Endpoints service. The vulnerabili...

6.1CVSS1.2AI score0.00564EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/20 12:00 a.m.•7 views

CVE-2020-13249: Undefined Security Weakness

libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadblib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle...

8.8CVSS6.5AI score0.02396EPSS
SaveExploits0References1
Veracode
Veracode
•added 2020/05/15 7:15 a.m.•45 views

JMX Rebind Flaw

camel is vulnerable to JMX rebind. The vulnerability exists due to a lack of security on JMX connector configuration...

7.5CVSS8.3AI score0.13959EPSS
SaveExploits0References29Affected Software6
CNVD
CNVD
•added 2020/05/14 12:00 a.m.•24 views

Cisco AMP for Endpoints Linux and Mac Connector Software Buffer Overflow Vulnerability

Cisco AMP for Endpoints Mac Connector Software and Cisco AMP for Endpoints Linux Connector Software are both products of Cisco, Inc.Cisco AMP for Endpoints Mac Cisco AMP for Endpoints Mac Connector Software is a suite of endpoint applications based on the macOS platform that integrates static and...

5.5CVSS7.1AI score0.00334EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2020/05/12 9:51 a.m.•107 views

Security Bulletin: IBM WebSphere Cast Iron Solution & App Connect Professional is affected by Apache Tomcat vulnerabilities.

Summary IBM WebSphere Cast Iron Solution & App Connect Professional has addressed the following vulnerabilities reported in Apache Tomcat. Vulnerability Details CVEID: CVE-2020-1938 DESCRIPTION: Apache Tomcat could allow a remote attacker to execute arbitrary code on the system, caused by a file...

9.8CVSS8.2AI score0.9927EPSS
SaveExploits54Affected Software3
Positive Technologies
Positive Technologies
•added 2020/05/12 12:00 a.m.•1 views

PT-2020-13396

Name of the Vulnerable Software and Affected Versions MariaDB Connector/C versions prior to 3.1.8 Description The issue is related to the improper validation of the content of an OK packet received from a server in the libmariadb/mariadb lib.c file. This problem does not affect any MySQL componen...

8.8CVSS0.02396EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/05/07 12:00 a.m.•67 views

Debian DSA-4680-1 : tomcat9 - security update

Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling, code execution in the AJP connector disabled by default in Debian or a man-in-the-middle attack against the JMX interface. %NASLMINLEVEL 70300 C Tenable Network Security, In...

9.8CVSS6.9AI score0.9927EPSS
SaveExploits54References11
Tenable Nessus
Tenable Nessus
•added 2020/05/07 12:00 a.m.•67 views

Debian DSA-4673-1 : tomcat8 - security update

Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling and code execution in the AJP connector disabled by default in Debian. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

9.8CVSS7.3AI score0.9927EPSS
SaveExploits54References6
Debian
Debian
•added 2020/05/06 8:58 p.m.•166 views

[SECURITY] [DSA 4680-1] tomcat9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4680-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 06, 2020 https://www.debian.org/security/faq -...

9.8CVSS6.9AI score0.9927EPSS
SaveExploits54
Debian
Debian
•added 2020/05/03 6:29 p.m.•170 views

[SECURITY] [DSA 4673-1] tomcat8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4673-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 03, 2020 https://www.debian.org/security/faq -...

9.8CVSS7.2AI score0.9927EPSS
SaveExploits54
Tenable Nessus
Tenable Nessus
•added 2020/05/01 12:00 a.m.•72 views

Oracle Identity Manager Connector Multiple Vulnerabilities (April 2020 CPU)

The remote host is missing the April 2020 Critical Patch Update for Oracle Identity Manager Connector. It is, therefore, affected by multiple vulnerabilities: - Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware component: General Apache ActiveMQ. The supported...

7.5CVSS6.8AI score0.12033EPSS
SaveExploits0References3
OSV
OSV
•added 2020/04/28 3:15 p.m.•75 views

CVE-2020-1745

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a...

9.8CVSS8AI score
SaveExploits0References5
NVD
NVD
•added 2020/04/28 3:15 p.m.•35 views

CVE-2020-1745

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a...

9.8CVSS9.5AI score0.04957EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2020/04/28 3:15 p.m.•42 views

CVE-2020-1745

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a...

9.8CVSS6.7AI score0.04957EPSS
SaveExploits0References3
Prion
Prion
•added 2020/04/28 3:15 p.m.•46 views

Remote code execution

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a...

7.5CVSS9.6AI score0.9927EPSS
SaveExploits54References5Affected Software1
Rows per page
Query Builder