Lucene search
+L

1900 matches found

BDU FSTEC
BDU FSTEC
•added 2024/05/17 12:00 a.m.•19 views

Vulnerability of the Server component: The Audit Plug-in of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The Audit Plug-in of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

6.1CVSS6.2AI score0.00887EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2024/05/08 2:15 a.m.•33 views

CVE-2024-1929

Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Confidentiality and Integrity via Configuration Dictionary. There are issues with the D-Bus interface long before Polkit is invoked. The org.rpm.dnf.v0.SessionManager.opensession...

8.4CVSS8.3AI score0.00286EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2024/04/30 4:54 p.m.•20 views

mysql: Server: Audit Plug-in unspecified vulnerability (CPU Apr 2024)

A flaw was found in the MySQL Server product of Oracle MySQL component: Server: Audit Plug-in. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorize...

4.9CVSS7AI score0.00887EPSS
SaveExploits0References5
NVD
NVD
•added 2024/04/25 5:15 p.m.•28 views

CVE-2024-32358

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...

7.5CVSS7.5AI score0.00736EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/04/25 12:00 a.m.•18 views

Jpress 安全漏洞

Jpress is a blogging platform developed in Java language by Jpress team. A security vulnerability exists in Jpress version v.5.1.0, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the custom plug-in module functionality...

7.5CVSS7.8AI score0.00736EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/04/25 12:00 a.m.•4 views

PT-2024-24533

Name of the Vulnerable Software and Affected Versions Jpress version 5.1.0 Description An issue in the custom plug-in module function allows a remote attacker to execute arbitrary code via a crafted script. This is a distinct issue from other known vulnerabilities. Recommendations For Jpress...

7.5CVSS0.00736EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/25 12:00 a.m.•4 views

CVE-2024-32358: Improper Control of Generation of Code

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...

7.5CVSS6.6AI score0.00736EPSS
SaveExploits0References2
CVE
CVE
•added 2024/04/25 12:00 a.m.•90 views

CVE-2024-32358

Jpress version 5.1.0 is vulnerable to an issue in the custom plug-in module function that allows a remote attacker to achieve arbitrary code execution by providing a crafted script . This vulnerability is distinct from CVE-2024-43033. As a temporary workaround until a patch is available, it is re...

7.5CVSS7.7AI score0.00736EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2024/04/25 12:00 a.m.•43 views

CVE-2024-32358

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...

7.7AI score0.00736EPSS
SaveExploits0References5
OSV
OSV
•added 2024/04/25 12:00 a.m.•15 views

CVE-2024-32358

An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033...

7.5CVSS8AI score
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2024/04/18 3:06 p.m.•46 views

CVE-2024-21061

A flaw was found in the MySQL Server product of Oracle MySQL component: Server: Audit Plug-in. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorize...

4.9CVSS6.2AI score0.00887EPSS
SaveExploits0References4
Veeam
Veeam
•added 2024/04/17 12:00 a.m.•142 views

How to Change Initial Management Port for Veeam Plug-ins for Enterprise Applications

Purpose This article documents how to change the default port used by the Plugin Manager 6791 for Veeam Plug-ins for Enterprise Applications: Veeam Plug-in for SAP HANA Veeam Plug-in for Oracle RMAN Veeam Plug-in for SAP on Oracle Veeam Plug-in for Microsoft SQL Server Veeam Plug-in for IBM Db2...

7AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2024/04/16 10:15 p.m.•24 views

UBUNTU-CVE-2024-21061

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Audit Plug-in. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQ...

4.9CVSS5.8AI score0.00887EPSS
SaveExploits0References3
OSV
OSV
•added 2024/04/16 9:26 p.m.•20 views

CVE-2024-21061

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Audit Plug-in. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQ...

4.9CVSS6.4AI score
SaveExploits0References4
Patchstack
Patchstack
•added 2024/04/16 6:25 p.m.•18 views

WordPress WP-FormAssembly plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin WP-FormAssembly versions = 2.0.10...

6.5CVSS6.1AI score0.00312EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/16 12:00 a.m.•5 views

CVE-2024-21061: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Audit Plug-in. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQ...

4.9CVSS5.7AI score0.00887EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2024/04/04 12:06 a.m.•31 views

CVE-2024-26715

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3gadgetsuspend In current scenario if Plug-out and Plug-In performed continuously there could be a chance while checking for dwc-gadgetdriver in dwc3gadgetsuspend, a NULL...

4.4CVSS7.1AI score0.00258EPSS
SaveExploits0References4
osv-debian
osv-debian
•added 2024/04/03 3:15 p.m.•3 views

DEBIAN-CVE-2024-26715

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3gadgetsuspend In current scenario if Plug-out and Plug-In performed continuously there could be a chance while checking for dwc-gadgetdriver in dwc3gadgetsuspend, a NULL...

5.5CVSS5.6AI score0.00258EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2024/04/03 2:55 p.m.•50 views

CVE-2024-26715

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3gadgetsuspend In current scenario if Plug-out and Plug-In performed continuously there could be a chance while checking for dwc-gadgetdriver in dwc3gadgetsuspend, a NULL...

5.5CVSS6.9AI score0.00258EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/04/03 2:55 p.m.•38 views

CVE-2024-26715 usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3gadgetsuspend In current scenario if Plug-out and Plug-In performed continuously there could be a chance while checking for dwc-gadgetdriver in dwc3gadgetsuspend, a NULL...

7.7AI score0.00258EPSS
SaveExploits0References5
Rows per page
Query Builder