Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

Vulnerability of the Server component: MySQL database’s stored procedures, related to errors during resource release, allowing attackers to cause service interruptions.

The vulnerability of the Server: Stored Procedure component of the MySQL database is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

The vulnerability of IMAP servers for direct-access voice mail systems with the Visual Voice Mail (VVM) visual interface for Android allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of IMAP servers for direct-access voice mail services with the Visual Voice Mail VVM visual interface on Android devices is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...

Vulnerability of the MySQL Server component of the Server: Federated database management system, which allows attackers to cause service interruptions.

The vulnerability of the MySQL Server component of the MySQL database management system is related to errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

Vulnerability of the Server: Group Replication Plugin component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Group Replication Plugin component of the MySQL Server database management system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

appyter (>=0.18.3 <=0.18.11), chronix2grid (>=0.1.0rc1 <=1.0.2) +22 more potentially affected by CVE-2022-24757 via jupyter-server (>=0.0.5 <=1.13.5)

jupyter-server PYPI version =0.0.5, =0.18.3, =0.1.0rc1, =0.0.1.dev7, =3.0.0b2, =2.0.0b1, =0.1.0, =0.18.0, =0.2.0, =0.0.18, =0.2.1, =0.0.2, =0.1.0, =4.3.2 and more Source cves: CVE-2022-24757 Source advisory: OSV:PYSEC-2022-179...

mysql: Server: DML unspecified vulnerability (CPU Apr 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 5.7.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

mysql: InnoDB unspecified vulnerability (CPU Jul 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2022-23349

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery CSRF...

CVE-2022-22394

The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the...

Bandai Namco FromSoftware Dark Souls III 安全漏洞

Bandai Namco FromSoftware Dark Souls III is an action role-playing game by Japanese company FromSoftware. A security vulnerability in the matchmaking server of Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to send arbitrary push requests to clients via...

CVE-2022-23610 Improper Verification of Cryptographic Signature in wire-server

wire-server provides back end services for Wire, an open source messenger. In versions of wire-server prior to the 2022-01-27 release, it was possible to craft DSA Signatures to bypass SAML SSO and impersonate any Wire user with SAML credentials. In teams with SAML, but without SCIM, it was...

CVE-2021-41987

In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scepservername value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10...

PT-2022-6937 · Mariadb +9 · Mariadb Server +9

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.9 and below Description: The issue is related to a segmentation fault in the sql/item cmpfunc.h component of the MariaDB Server. It is associated with insufficient use of the assert function. Exploitation of this...

Yokogawa Exaopc 安全漏洞

Yokogawa Electric is a server of Yokogawa Electric Yokogawa, Japan. A security vulnerability exists in CAMS for HIS Log Server in Yokogawa Electric. The vulnerability stems from CAMS for HIS Log Server not properly enabling log output. The following products and versions are affected: CENTUM CS...

DEBIAN-CVE-2022-26661

An XXE issue was discovered in Tryton Application Platform Server 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform Command Line Client proteus 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user...

UBUNTU-CVE-2022-26661

An XXE issue was discovered in Tryton Application Platform Server 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform Command Line Client proteus 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user...

Tryton 安全漏洞

Tryton is a content management system. Tryton Application Platform Server versions 5.x through 5.0.45, 6.x through 6.0.15, 6.1.x, 6.2.x through 6.2.5 and Tryton Application Platform Command Line A security vulnerability exists in Tryton Application Platform Command Line proteus versions 5.x throu...

CVE-2022-24282

A vulnerability has been identified in SINEC NMS All versions = V1.0.3 V2.0, SINEC NMS All versions V1.0.3, SINEMA Server V14 All versions. The affected system allows to upload JSON objects that are deserialized to Java objects. Due to insecure deserialization of user-supplied content by the...

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800, related to the use of rigidly encrypted accounting data, allows a perpetrator to increase their privileges.

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800 is related to the use of rigidly encrypted accounting data. Exploiting this vulnerability can allow attackers to enhance their privileges...