mysql: InnoDB unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 8.0.16 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks...

mysql: InnoDB unspecified vulnerability (CPU Apr 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

mysql: Server: FTS unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: FTS. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

PT-2019-3705 · Mysql Server +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.26 and prior MySQL Server versions 8.0.16 and prior Description: A vulnerability in the MySQL Server product allows a highly privileged attacker with network access via multiple protocols to compromise the server...

CVE-2019-1910

A vulnerability in the implementation of the Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same ISIS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...

PT-2019-11773 · Jenkins · Jenkins Avatar Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Avatar Plugin versions 1.2 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read access to change the avatar of any user of Jenkins. Recommendations: For Jenkins Avatar Plugin versions 1....

Cherokee Web Server Buffer Overflow Vulnerability

Cherokee Web Server is a web server for highly concurrent web applications. A buffer overflow vulnerability exists in Cherokee Web Server versions 1.2.103 and earlier. The vulnerability originates when a web system or product performs an operation in memory without properly validating data...

UBUNTU-CVE-2019-2755

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2019-9821

A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability affects Firefox 67...

CVE-2019-1010149

zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licencesave.php...

Redbrick Technologies Shift Information Disclosure Vulnerability (CNVD-2019-38853)

Redbrick Technologies Shift is a suite of application platforms from Redbrick Technologies, a Canadian company. The platform supports managed access to email, chat programs, network storage, and more. An information disclosure vulnerability exists in Redbrick Technologies Shift 3.4.3 and prior...

UBUNTU-CVE-2019-2738

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Compiling. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple...

CVE-2019-7954

CVE-2019-7954 describes a stored cross-site scripting vulnerability in Adobe Experience Manager versions 6.4 and earlier. The issue allows an attacker to disclose sensitive information in the context of the current user, as noted in multiple sources (NVD/Red Hat entries). Exploitation could occur...

SoX Buffer Overflow Vulnerability

SoX is a set of open source audio processing tools. The product supports playing, converting and recording audio in many formats. A buffer overflow vulnerability exists in the 'readsamples' function of the xa.c file in SoX 14.4.2 and earlier. The vulnerability stems from a networked system or...

Oracle MySQL Server Component Input Validation Error Vulnerability (CNVD-2019-26682)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An input validation error vulnerability in the Server: Components / Services subcomponent of the MySQL Server component in Oracle MySQL, version 8.0....

Oracle MySQL Server Component Input Validation Error Vulnerability (CNVD-2019-26680)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Charsets subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.16 and earlier. An...

nfdump buffer overflow vulnerability

nfdump is an open source tool for collecting and processing netflow data. A buffer overflow vulnerability exists in nfdump version 1.6.16 and earlier. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in...

PT-2019-4917 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.26 and prior MySQL Server versions 8.0.16 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Optimizer subcomponent. It allows a...

PT-2019-6408 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue is related to incorrect privilege assignment in the MySQL Server component of Oracle MySQL, allowing a high-privileged attacker with network access via multiple protocols to...

PT-2019-4922 · Mysql Server +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.26 and prior MySQL Server versions 8.0.16 and prior Description: The issue is related to insufficient access control in the Client programs component of the MySQL Server. It allows a high-privileged attacker with...