Lucene search
+L

84 matches found

ATTACKERKB
ATTACKERKB
added 2022/01/19 12:15 p.m.5 views

CVE-2022-21270

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Federated. Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

4.9CVSS6.5AI score0.01856EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/15 12:0 a.m.8 views

PT-2021-6983 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.37 and prior MySQL Server versions 8.0.28 and prior Description: The issue is related to insufficient input validation in the MySQL Server component, specifically in the Server: DDL subcomponent. This can be exploite...

10CVSS6.9AI score0.87816EPSS
SaveExploits22References827
OSV
OSV
added 2021/10/28 1:53 p.m.11 views

UVI-2021-1001882 userfaultfd: fix a race between writeprotect and exit_mmap()

userfaultfd: fix a race between writeprotect and exitmmap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/08/03 1:44 a.m.13 views

GSD-2021-1001234 bus: mhi: core: Validate channel ID when processing command completions

bus: mhi: core: Validate channel ID when processing command completions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.54 by commit...

7.3AI score
SaveExploits0
OSV
OSV
added 2021/08/03 1:32 a.m.7 views

UVI-2021-1001176 bus: mhi: core: Validate channel ID when processing command completions

bus: mhi: core: Validate channel ID when processing command completions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/01/22 12:0 a.m.27 views

Oracle MySQL Server 5.7 <= 5.7.32 / 8.0 <= 8.0.22 Security Update (cpujan2021) - Linux

Oracle MySQL Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.3CVSS5.5AI score0.01588EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/10/23 12:0 a.m.31 views

Oracle MySQL Server 5.7 <= 5.7.31 / 8.0 <= 8.0.21 Security Update (cpuoct2020) - Windows

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

6.8CVSS7.7AI score0.02653EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2020/09/14 12:58 p.m.5 views

mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

4.9CVSS6.8AI score0.02981EPSS
SaveExploits0References5
OSV
OSV
added 2020/05/22 3:15 p.m.35 views

CVE-2020-10711

A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option CIPSO protocol's category bitmap into the SELinux extensible bitmap via the' ebitmapnetlblimport' routine. While processing...

5.9CVSS6.9AI score0.03097EPSS
SaveExploits0References13
Packet Storm
Packet Storm
added 2019/11/12 12:0 a.m.128 views

LavaLite CMS 5.7 Cross Site Scripting

Exploit Title: LavaLite CMS - 5.7 - Cross-Site Scripting Date: 09-10-2019 Exploit Author: Ismail Tasdelen Vendor Homepage: https://lavalite.org/ Software Link : https://github.com/LavaLite/cms Software : LavaLite CMS - v 5.7 Version : v 5.7 Vulernability Type : Cross-site Scripting Vulenrability ...

6.4AI score0.00874EPSS
SaveExploits2
NVD
NVD
added 2019/10/16 6:15 p.m.30 views

CVE-2019-3025

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the...

9CVSS8.6AI score0.14457EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
added 2019/10/15 12:0 a.m.6 views

PT-2019-3723 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.6.45 and prior Oracle MySQL Server versions 5.7.27 and prior Description: The issue is related to insufficient access control in the encryption component of Oracle MySQL Server, allowing an attacker to gain...

6.5CVSS5.2AI score0.03726EPSS
SaveExploits0References102
Symantec
Symantec
added 2019/10/15 12:0 a.m.44 views

Oracle Hospitality RES 3700 CVE-2019-3025 Remote Security Vulnerability

Description Oracle Hospitality RES 3700 is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Interface' package is affected. This vulnerability affects the following supported versions: 5.7 Technologies Affected Oracle Hospitality RES 3700...

0.4AI score0.14457EPSS
SaveExploits4References1Affected Software1
Positive Technologies
Positive Technologies
added 2019/10/15 12:0 a.m.5 views

PT-2019-3658 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.7.27 and prior Oracle MySQL versions 8.0.17 and prior Description: The issue is related to inadequate access control in the MySQL Server product, specifically in the Server: C API component. It allows an attacker with...

9.8CVSS6.4AI score0.49739EPSS
SaveExploits2References678
NVD
NVD
added 2019/10/10 12:15 p.m.14 views

CVE-2019-17434

LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen...

5.4CVSS5.2AI score0.00598EPSS
SaveExploits1References1
Ubuntu
Ubuntu
added 2019/07/24 11:34 a.m.207 views

USN-4070-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 19.04 have been updated to MySQL 5.7.27. In addition to security fixes, the updated packages contain bug fixes, new features,...

6.5CVSS6.5AI score0.03972EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2019/07/24 12:0 a.m.74 views

Oracle MySQL Server 5.7 <= 5.7.26 / 8.0 <= 8.0.16 Security Update (cpujul2019) - Windows

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

5.5CVSS6.9AI score0.03061EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/04/25 12:0 a.m.33 views

MySQL 5.7.x < 5.7.23 Multiple Vulnerabilities (July 2018 CPU)

Binary data 700627.prm...

7.1CVSS6.1AI score0.19295EPSS
SaveExploits0References17
OpenVAS
OpenVAS
added 2018/10/17 12:0 a.m.39 views

Oracle Mysql Security Update (cpuoct2018 - 01) - Linux

Oracle MySQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; ifdescription...

6.5CVSS7.9AI score0.03716EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/10/17 12:0 a.m.63 views

Oracle Mysql Security Update (cpuoct2018 - 02) - Linux

Oracle MySQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; ifdescription...

9.8CVSS8.1AI score0.0755EPSS
SaveExploits0References2
Rows per page
Query Builder