Lucene search
+L

37 matches found

NVD
NVD
•added 2026/09/30 9:17 p.m.•13 views

CVE-2026-102135

On a Kiteworks Email Protection Gateway cluster with database replication enabled, a party trusted by the cluster could submit a crafted serialized object that was deserialized without sufficient validation, potentially allowing code execution as the gateway service account. Replication is disabl...

6.6CVSS0.01276EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/30 8:12 p.m.•43 views

CVE-2026-102135 Kiteworks Email Protection Gateway Deserialization of Untrusted Data

On a Kiteworks Email Protection Gateway cluster with database replication enabled, a party trusted by the cluster could submit a crafted serialized object that was deserialized without sufficient validation, potentially allowing code execution as the gateway service account. Replication is disabl...

6.6CVSS0.01276EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/30 8:12 p.m.•7 views

CVE-2026-102135 Kiteworks Email Protection Gateway Deserialization of Untrusted Data

On a Kiteworks Email Protection Gateway cluster with database replication enabled, a party trusted by the cluster could submit a crafted serialized object that was deserialized without sufficient validation, potentially allowing code execution as the gateway service account. Replication is disabl...

6.6CVSS6.1AI score0.01276EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/30 8:12 p.m.•12 views

EUVD-2026-90280

On a Kiteworks Email Protection Gateway cluster with database replication enabled, a party trusted by the cluster could submit a crafted serialized object that was deserialized without sufficient validation, potentially allowing code execution as the gateway service account. Replication is disabl...

6.6CVSS6.1AI score0.01276EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•4 views

PT-2026-103568

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway affected versions not specified Description An issue exists in Kiteworks Email Protection Gateway clusters when database replication is enabled. A trusted party within the cluster can submit a crafted...

6.6CVSS6.1AI score0.01276EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/09 11:23 a.m.•19 views

CVE-2021-31341

Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server and the used XML-framework on the Mendix Database Replication Module All versions prior to v7.0.1...

4.3CVSS5.5AI score0.00721EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-25942

Malware in sbrugna...

7.5CVSS6.7AI score0.00857EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2021-18251

Malware in sbrugna...

4.3CVSS5.6AI score0.00721EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/20 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2018-2647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.6.38 and prior and...

7.5CVSS5.7AI score0.02422EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/05/22 3:22 p.m.•31 views

CVE-2025-2506

When pglogical attempts to replicate data, it does not verify it is using a replication connection, which means a user with CONNECT access to a database configured for replication can execute the pglogical command to obtain read access to replicated tables. When pglogical runs it should verify it...

5.3CVSS0.00312EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/07/28 12:00 a.m.•19 views

Vulnerability of the Server component: The Replication function of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Replication component of the MySQL database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.1CVSS6.3AI score0.01004EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/14 12:00 a.m.•15 views

Vulnerability of the Server component: The Replication module of the MySQL database management system, which allows attackers to compromise data integrity and cause service interruptions.

The vulnerability of the Server: Replication component of the MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity and cause service failures...

7CVSS7.1AI score0.02203EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2021/05/14 12:00 a.m.•15 views

Vulnerability of the Server component: The Replication function of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.8CVSS6.8AI score0.01352EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2021/05/12 2:15 p.m.•32 views

Design/Logic Flaw

Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server and the used XML-framework on the Mendix Database Replication Module All versions prior to v7.0.1...

4CVSS4.4AI score0.00721EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/05/12 1:18 p.m.•66 views

CVE-2021-31341

CVE-2021-31341 affects Siemens Mendix Database Replication Module (all versions prior to 7.0.1). The vulnerability arises when uploading a table-mapping via a manipulated XML file, causing an exception that could disclose information about the application server and the XML framework in use. Impa...

4.3CVSS4.4AI score0.00721EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/12 12:00 a.m.•9 views

CVE-2021-31341: Generation of Error Message Containing Sensitive Information

Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server and the used XML-framework on the Mendix Database Replication Module All versions prior to v7.0.1...

4.3CVSS5.7AI score0.00721EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/05/12 12:00 a.m.•3 views

PT-2021-19250

Name of the Vulnerable Software and Affected Versions Mendix Database Replication Module versions prior to 7.0.1 Description Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server and the used XML-framework...

4.3CVSS0.00721EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/05/11 12:00 a.m.•21 views

Siemens Mendix 安全漏洞

Siemens Mendix is a low-code application development platform from Siemens. The platform provides application development, testing, deployment, and iteration. A security vulnerability exists in Siemens Mendix. The vulnerability stems from the system's use of XML file upload table mappings that...

4.3CVSS5.2AI score0.00721EPSS
SaveExploits0References5
ICS
ICS
•added 2021/05/11 12:00 a.m.•73 views

Siemens Mendix Database Replication Module

1. EXECUTIVE SUMMARY CVSS v3 4.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Mendix Database Replication Module Vulnerability: Generation of Error Message Containing Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could...

4.3CVSS4.9AI score0.00721EPSS
SaveExploits0References11
CNVD
CNVD
•added 2021/03/09 12:00 a.m.•15 views

IBM API Connect Information Disclosure Vulnerability (CNVD-2021-17207)

IBM API Connect is a comprehensive end-to-end API lifecycle solution. An information disclosure vulnerability exists in IBM API Connect 10.0.1.0. The vulnerability stems from insecure communication during database replication. An attacker could exploit the vulnerability to view unencrypted data...

7.5CVSS5.9AI score0.00857EPSS
SaveExploits0References1
Rows per page
Query Builder