Lucene search
+L

42 matches found

OSV
OSV
•added 2023/02/17 5:15 p.m.•9 views

CVE-2022-43929

IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted 'Load' command. IBM X-Force ID: 241676...

7.5CVSS5.8AI score0.00739EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/02/17 4:57 p.m.•9 views

CVE-2022-43929 IBM Db2 for Linux, UNIX and Windows denial of service

IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted 'Load' command. IBM X-Force ID: 241676...

4.9CVSS7.2AI score0.00739EPSS
SaveExploits0References2
CVE
CVE
•added 2023/02/17 4:57 p.m.•182 views

CVE-2022-43929

CVE-2022-43929 affects IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5. The vulnerability allows a Denial of Service when processing a specially crafted Load command. Public IBM/Red Hat bulletins corroborate the issue and outline remediation paths. Connected documents indicate the issue is addr...

7.5CVSS5.9AI score0.00739EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/17 12:00 a.m.•0 views

CVE-2022-43929: Improper Input Validation

IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted 'Load' command. IBM X-Force ID: 241676...

7.5CVSS5.7AI score0.00739EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/02/08 12:00 a.m.•7 views

PT-2023-2144 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows versions 11.1 through 11.5 Description: The issue is related to insufficient input validation in the database management system, which can be exploited to cause a Denial of Service by executing a specially...

7.5CVSS7.3AI score0.00739EPSS
SaveExploits0References6
CNVD
CNVD
•added 2021/03/09 12:00 a.m.•20 views

Unspecified Vulnerability in Luxion KeyShot

Luxion KeyShot is a software for designing photos of 3D scenes from Luxion USA. The software enables a real-time 3D rendering workflow that displays results immediately and reduces the time required to create photorealistic product photos. A security vulnerability exists in the Luxion KeyShot...

7.8CVSS6.8AI score0.01563EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/04 12:00 a.m.•21 views

Luxion KeyShot 安全漏洞

Luxion KeyShot is a software for designing photos of 3D scenes from Luxion USA. The software enables a real-time 3D rendering workflow that displays results immediately and reduces the time required to create photorealistic product photos. A security vulnerability exists in the Luxion KeyShot...

7.8CVSS7.1AI score0.01563EPSS
SaveExploits0References6
OSV
OSV
•added 2020/05/12 6:15 p.m.•17 views

CVE-2020-6248

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

7.2CVSS7.8AI score0.01888EPSS
SaveExploits0References2
Prion
Prion
•added 2020/05/12 6:15 p.m.•27 views

Code injection

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

6.5CVSS7.5AI score0.01888EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2020/05/12 6:15 p.m.•7 views

CVE-2020-6248

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

9.1CVSS9.2AI score0.01888EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2020/05/12 5:50 p.m.•81 views

CVE-2020-6248

CVE-2020-6248 affects SAP Adaptive Server Enterprise (Backup Server) 16.0. The issue arises because the server does not perform required validation for an authenticated user during DUMP/LOAD, enabling arbitrary code execution or code injection. Related sources describe potential database takeover...

9.1CVSS7.8AI score0.01888EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/12 12:00 a.m.•5 views

CVE-2020-6248: Improper Input Validation

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

9.1CVSS8.6AI score0.01888EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2019/10/21 11:29 a.m.•101 views

UAC-A-Mola - Tool That Allows Security Researchers To Investigate New UAC Bypasses, In Addition To Detecting And Exploiting Known Bypasses

UAC-A-Mola is a tool that allows security researchers to investigate new UAC bypasses, in addition to detecting and exploiting known bypasses. UAC-A-mola has modules to carry out the protection and mitigation of UAC bypasses. The strong point of uac-a-mola is that it was created so that other...

7.9AI score
SaveExploits0References1
CNVD
CNVD
•added 2019/08/29 12:00 a.m.•14 views

GNU Chess Stack Buffer Overflow Vulnerability

GNU Chess is a chess game program. A stack buffer overflow vulnerability exists in the cmdload function in frontend/cmd.cc in GNU Chess 6.2.5. An attacker can exploit this vulnerability to cause a stack buffer overflow via a specially crafted chess position in an EPD file...

7.8CVSS7.3AI score0.01468EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/07/26 12:00 a.m.•10 views

Cisco SD-WAN Solution Remote Command Injection Vulnerability (CNVD-2018-14074)

Cisco vBond Orchestrator Software and other products are from Cisco. cisco vBond Orchestrator Software is a set of security network extension management software. vEdge 100 Series Routers is a 100 series router product. SD-WAN Solution is a set of network extension solution running in it. A comma...

9CVSS7.5AI score0.02859EPSS
SaveExploits0References1
OSV
OSV
•added 2018/07/18 11:29 p.m.•14 views

CVE-2018-0348

A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to t...

7.2CVSS6AI score0.02859EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/18 12:00 a.m.•4 views

CVE-2018-0348: Improper Neutralization of Special Elements used in a Command

A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to t...

9CVSS7.5AI score0.02859EPSS
SaveExploits0References3
NVD
NVD
•added 2006/06/19 10:02 a.m.•29 views

CVE-2006-3067

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

5CVSS7.2AI score0.02491EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2006/06/19 10:00 a.m.•41 views

CVE-2006-3067

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

7.2AI score0.02491EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2005/02/06 12:00 a.m.•8 views

PT-2005-1308 · Postgresql +1 · Postgresql +1

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 7.2.x through 7.4.x PostgreSQL affected versions not specified Description: The issue allows local users to load arbitrary shared libraries and execute code via the LOAD extension. Any database user is permitted to load...

7.5CVSS6.5AI score0.14473EPSS
SaveExploits2References27
Rows per page
Query Builder