CVE-2017-0892

Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file...

The vulnerability of the Android operating system, which allows a violator to compromise data privacy

The vulnerability of the Mediaserver application for the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-06394)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: DML subcomponent of the MySQL Server component of Oracle MySQL. An attacker could exploit this...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-06393)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: Security: Privileges subcomponent of the MySQL Server component of Oracle MySQL. An attacker coul...

Directory Traversal

pooledwebsocket is vulnerable to directory traversal attacks. Attackers can access sensitive data and files on a server by requesting URLs such as /..%2f..%2fetc/passwd...

CVE-2017-3557

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: Print Server. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP t...

CVE-2017-3467

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: C API. Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

CVE-2017-3331

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. The supported version that is affected is 5.7.11 to 5.7.17. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Code injection

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access vi...

CVE-2017-3329

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Thread Pooling. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via...

UBUNTU-CVE-2017-3308

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoco...

UBUNTU-CVE-2017-3457

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

UBUNTU-CVE-2017-3468

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.7.17 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-05871)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability in the Server: DML subcomponent of Oracle MySQL Server 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier c...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-05869)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: DML subcomponent of Oracle MySQL Server 5.7.17 and earlier versions, which can be exploited by an...

CVE-2017-5662

CVE-2017-5662 affects Apache Batik before 1.9, exposing files on the server when processing adversarial SVGs. Root context could lead to full server compromise; XXE can trigger DoS amplification. Connected docs confirm Batik-related exploits/SSRF risks and list affected platforms (e.g., Batik =1....

PT-2017-2368 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.10.11 Description: The issue is related to the NFSv2/NFSv3 server in the nfsd subsystem, which allows remote attackers to cause a denial of service system crash via a long RPC reply. This is due to insufficien...

CVE-2016-8723

CVE-2016-8723 affects Moxa AWK-3131A Wireless Access Point (firmware 1.1). A null pointer dereference in the Web Application can be triggered by HTTP GET requests not starting with ‘/’, causing the web server to segfault (Denial of Service). Reported CVSS around 7.5 (HIGH). Exploitation details e...

PT-2017-1959 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.54 and earlier MySQL Server versions 5.6.35 and earlier MySQL Server versions 5.7.17 and earlier Description: The issue is related to inadequate access control in the MySQL Server component of Oracle MySQL,...

Denial of service

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V...