180 matches found
CVE-2022-34424
Networking OS10, versions 10.5.1.x, 10.5.2.x, and 10.5.3.x contain a vulnerability that could allow an attacker to cause a system crash by running particular security scans...
CVE-2022-3211
Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.6...
mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations
MariaDB through 10.5.9 allows a sqlparse.cc application crash because of incorrect usedtables expectations...
IBM DB2 安全漏洞
IBM DB2 is a relational database management system from International Business Machines IBM of the United States. The system is implemented in UNIX, Linux, IBMi, z/OS, and Windows server versions.IBM DB2 versions 9.7, 10.1, 10.5, 11.1, and 11.5 have an information disclosure vulnerability that...
CVE-2022-22483
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauthorized access caused by improper privilege management when CREATE OR REPLACE command is used. IBM X-Force ID: 225979...
mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements
MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements...
mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements
MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements...
mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations
MariaDB through 10.5.9 allows a sqlparse.cc application crash because of incorrect usedtables expectations...
DEBIAN-CVE-2022-32089
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel...
CVE-2022-32082
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...
CVE-2021-39076
IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 215585...
CVE-2021-39078
IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215589...
Open-xchange OX App Suite 跨站脚本漏洞
Open-xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange Open-xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A security vulnerability exists in Open-xchange OX App Suite versions 7.10.5 and below, and no detailed...
CVE-2021-46663
MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements...
DEBIAN-CVE-2021-46665
MariaDB through 10.5.9 allows a sqlparse.cc application crash because of incorrect usedtables expectations...
CVE-2021-24991
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard...
CVE-2021-43036
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The password for the PostgreSQL wguest account is weak...
CVE-2021-43040
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The privileged vaultServer could be leveraged to create arbitrary writable files, leading to privilege escalation...
PT-2021-23726 · Kaseya +1 · Kaseya Unitrends Backup Appliance +1
Name of the Vulnerable Software and Affected Versions: Kaseya Unitrends Backup Appliance versions prior to 10.5.5 Description: An issue was discovered in the Unitrends Windows agent, which was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed...