Lucene search
+L

843 matches found

GithubExploit
GithubExploit
•added 2024/02/25 11:51 a.m.•464 views

Exploit for Weak Password Requirements in Laborofficefree

CVE-2024-1346 Weak MySQL database root password in LaborOffice...

6.8CVSS5.9AI score0.00392EPSS
SaveExploits5
RedHat Linux
RedHat Linux
•added 2024/02/20 12:40 p.m.•9 views

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS5.7AI score0.00925EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/02/20 12:40 p.m.•15 views

mysql: Server: DDL unspecified vulnerability (CPU Jan 2024)

Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash complete DOS of MySQL Server as well a...

5.5CVSS7.3AI score0.00839EPSS
SaveExploits0References5
Prion
Prion
•added 2024/02/19 12:15 p.m.•25 views

Default credentials

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants...

3.6CVSS7.1AI score0.00392EPSS
SaveExploits5References1
BDU FSTEC
BDU FSTEC
•added 2024/02/07 12:00 a.m.•15 views

Vulnerability of the MySQL Server component: The UDF component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.1CVSS6.8AI score0.01104EPSS
SaveExploits0References5Affected Software1
Ubuntu
Ubuntu
•added 2024/01/30 12:38 p.m.•267 views

USN-6615-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.36 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.10. In addition to security fixes, the updated packages contain bug fixes, new features...

6.5CVSS6AI score0.01539EPSS
SaveExploits0
OSV
OSV
•added 2024/01/25 3:15 p.m.•17 views

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

6.5CVSS5.7AI score0.00136EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/25 3:15 p.m.•40 views

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

7.8CVSS7.4AI score0.00136EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/25 3:15 p.m.•27 views

Design/Logic Flaw

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

1.7CVSS6.8AI score0.00136EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/25 2:53 p.m.•25 views

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

7.8CVSS6.5AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/01/25 2:53 p.m.•36 views

CVE-2024-22432

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

7.8CVSS7.6AI score0.00136EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/01/25 12:00 a.m.•14 views

PT-2024-1634

Name of the Vulnerable Software and Affected Versions Vinchin Backup & Recovery version 7.2 Description The issue is related to the use of default credentials in Vinchin Backup & Recovery. This could allow a remote attacker to elevate their privileges. Recommendations For Vinchin Backup & Recover...

10CVSS7.1AI score0.0111EPSS
SaveExploits3References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/25 12:00 a.m.•2 views

CVE-2024-22432: Plaintext Storage of a Password

Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Database backups. User has low privilege access to Networker Client system could potentially exploit this vulnerability, leading to the disclosure of configure...

7.8CVSS6.8AI score0.00136EPSS
SaveExploits0References3
OSV
OSV
•added 2023/12/22 5:15 p.m.•19 views

PYSEC-2023-287

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. When submitting a Job to run via a Job Button, only the model-level extras.runjob permission is checked i.e., does the user have...

4.3CVSS4.4AI score0.00452EPSS
SaveExploits0References7
GithubExploit
GithubExploit
•added 2023/12/19 10:45 p.m.•6 views

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49968 Customer Support System 1.0 - SQL Injection V...

7.3CVSS6.2AI score0.00456EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2023/12/19 10:27 p.m.•8 views

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49548 Customer Support System 1.0 - SQL Injection V...

6.2AI score0.00755EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2023/12/19 9:54 p.m.•8 views

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-49546 Customer Support System 1.0 - SQL Injection V...

6.2AI score0.00755EPSS
SaveExploits2
Imperva Blog
Imperva Blog
•added 2023/10/19 12:54 p.m.•37 views

Database Ransomware: From Attack to Recovery

Introduction In recent years, ransomware attacks have risen sharply, due to their profitability, ease of access with ransomware-as-a-service RaaS tools, and an increasing attack surface. Ransomware is a type of attack in which the attacker locks and encrypts a victim’s data and then demands a...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2023/08/02 12:00 a.m.•22 views

Vulnerability of the Server component: The DDL system for database management in MySQL, which allows a hacker to cause a service failure.

Vulnerability of the Server component: The DDL system for managing databases in MySQL is vulnerable to errors during the processing of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

4.6CVSS6.3AI score0.01699EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
•added 2023/07/17 12:00 a.m.•16 views

编号撤回

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. This CVE number has been withdrawn...

6.8AI score
SaveExploits1References2
Rows per page
Query Builder