Lucene search
+L

1337 matches found

BDU FSTEC
BDU FSTEC
•added 2020/02/03 12:00 a.m.•12 views

Vulnerability of the Server: Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause downtime or service failures using the MySQL network protocol...

4.9CVSS6.7AI score0.01878EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2020/02/03 12:00 a.m.•13 views

The vulnerability of the Libraries component in Oracle Java SE software platforms allows a perpetrator to trigger a service failure.

The vulnerability of the Libraries component in Oracle Java SE software platforms is related to lack of access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using network protocols...

4.3CVSS6.4AI score0.0396EPSS
SaveExploits0References7Affected Software16
BDU FSTEC
BDU FSTEC
•added 2020/02/03 12:00 a.m.•13 views

The vulnerability of the Java Secure Socket Extension (JSSE) component in Oracle Java SE software allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Java Secure Socket Extension JSSE in Oracle Java SE software platforms is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or gain unauthorized access to protected information using the HTT...

5.8CVSS6.5AI score0.03613EPSS
SaveExploits0References6Affected Software10
BDU FSTEC
BDU FSTEC
•added 2020/02/03 12:00 a.m.•29 views

The vulnerability of the Enterprise Manager for Oracle Database component (Change Manager – web-based) of the Oracle Enterprise Manager software platform allows a malicious individual to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Enterprise Manager for Oracle Database’s Change Manager web-based software platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information or cause service failures usi...

6.5CVSS6.6AI score0.01159EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/01/21 12:00 a.m.•72 views

Debian DLA-2068-1 : linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, or information leak. CVE-2019-2215 The syzkaller tool discovered a use-after-free vulnerability in the Android binder driver. A local user on a system with this driver...

10CVSS7.2AI score0.72105EPSS
SaveExploits40References43
Positive Technologies
Positive Technologies
•added 2020/01/14 12:00 a.m.•2 views

PT-2020-1499

Name of the Vulnerable Software and Affected Versions MySQL Client versions 5.7.28 and prior MySQL Client versions 8.0.18 and prior Description The issue is related to insufficient access control in the C API component of the MySQL Client. It can be exploited by a remote attacker to cause a denia...

5.9CVSS0.03006EPSS
SaveExploits0References239
Positive Technologies
Positive Technologies
•added 2020/01/14 12:00 a.m.•2 views

PT-2020-1501

Name of the Vulnerable Software and Affected Versions MySQL Client versions 5.7.28 and prior MySQL Client versions 8.0.18 and prior Description The issue is related to insufficient access control in the MySQL Client's C API, which can be exploited by a remote attacker to cause a denial of service...

7.2CVSS0.02917EPSS
SaveExploits0References239
OSV
OSV
•added 2020/01/07 11:15 p.m.•11 views

CVE-2019-17146

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When parsing the...

9.8CVSS7.7AI score0.09532EPSS
SaveExploits0References2
OSV
OSV
•added 2019/12/30 5:15 a.m.•19 views

UBUNTU-CVE-2019-20096

In the Linux kernel before 5.1, there is a memory leak in featregistersp in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b...

5.5CVSS6.4AI score0.00994EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•14 views

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

6.8CVSS7AI score0.03952EPSS
SaveExploits0References18Affected Software7
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•11 views

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

6.8CVSS6.7AI score0.03952EPSS
SaveExploits0References18Affected Software7
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•10 views

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

6.8CVSS6.6AI score0.03952EPSS
SaveExploits0References17Affected Software6
Positive Technologies
Positive Technologies
•added 2019/12/08 12:00 a.m.•4 views

PT-2021-2892

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.30 and prior MySQL Server versions 8.0.17 and prior Description The issue is related to insufficient input validation in the Server: Optimizer component of Oracle MySQL Server. This can be exploited by a remote attack...

6.8CVSS0.0111EPSS
SaveExploits0References245
RedHat Linux
RedHat Linux
•added 2019/12/02 5:04 p.m.•14 views

HTTP/2: flood using PING frames results in unbounded memory growth

A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

7.8CVSS7.4AI score0.83433EPSS
SaveExploits1References9
OSV
OSV
•added 2019/11/25 5:15 p.m.•15 views

CVE-2019-4406

IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477...

4.4CVSS5.7AI score0.003EPSS
SaveExploits0References2
Cloud Foundry
Cloud Foundry
•added 2019/11/21 12:00 a.m.•168 views

USN-4185-1: Linux kernel vulnerabilities | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck...

8.8CVSS7.5AI score0.03133EPSS
SaveExploits0
NVD
NVD
•added 2019/11/14 5:15 p.m.•17 views

CVE-2019-16110

The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream...

8.1CVSS8.4AI score0.01691EPSS
SaveExploits0References1
Prion
Prion
•added 2019/11/14 5:15 p.m.•22 views

Code injection

The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream...

6.8CVSS8.4AI score0.01691EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/11/14 4:56 p.m.•59 views

CVE-2019-16110

Blade Shadow up to version 2.13.3 is vulnerable to remote code execution via the network protocol: an attacker who knows the victim’s IP can inject data into the unencrypted UDP stream, potentially taking control of a Shadow instance. Root cause: unprotected UDP packet handling allows arbitrary c...

8.1CVSS8.4AI score0.01691EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/11/14 4:56 p.m.•32 views

CVE-2019-16110

The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream...

8.4AI score0.01691EPSS
SaveExploits0References1
Rows per page
Query Builder