156 matches found
mysql: InnoDB unspecified vulnerability (CPU Jan 2021)
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromis...
CVE-2021-2446
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Client. The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global...
Oracle Secure Global Desktop输入验证错误漏洞
Oracle Secure Global Desktop is a secure remote access solution for any cloud-hosted enterprise applications and hosted desktops running on Microsoft Windows, Linux, Oracle Solaris, and mainframe servers. A security vulnerability exists in the Client component in version 5.6. An attacker could...
Yzmcms 跨站脚本漏洞
Yzmcms is an open source CMS Content Management System. A cross-site scripting vulnerability exists in YzmCMS version 5.6. The vulnerability stems from the program using UEditor 1.4.3.3, so the vulnerability can be exploited through the SRC attribute of the IFRAME element in...
CVE-2021-2248
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Server. The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global...
CVE-2021-2177
Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Gateway. The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global...
DaDa accelerator 安全漏洞
Ta da Accelerator is a game gas pedal software. A denial of service vulnerability exists in DaDa Accelerator version 5.6.19.816. An attacker could exploit the vulnerability through a specially crafted program to cause a computer crash...
vBulletin Cross-Site Scripting Vulnerability (CNVD-2020-50941)
vBulletin is a suite of forum programs that can be customized to suit your needs. A cross-site scripting vulnerability exists in the Admin CP in vBulletin 5.6.3. The vulnerability can be exploited to conduct cross-site scripting attacks via admincp/attachment.php&do=rebuild&type= URI...
mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
Advantech iView Input Validation Vulnerability (CVE-2020-14503)
Advantech iView is a device management application from Advantech. An input validation error vulnerability exists in Advantech iView 5.6 and prior versions. A remote attacker can exploit this vulnerability to execute arbitrary code...
CVE-2020-14499
Advantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful exploitation of this vulnerability may allow an attacker to obtain all user accounts credentials...
PT-2020-10904 · Mcafee · Mcafee Agent
Name of the Vulnerable Software and Affected Versions: McAfee Agent versions prior to 5.6.4 Description: The issue allows attackers with local access to execute arbitrary code via execution from a compromised folder. This is due to a DLL Search Order Hijacking vulnerability. Recommendations: For...
DEBIAN-CVE-2020-12464
usbsgcancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925...
CVE-2020-10821
Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter...
ZOHO ManageEngine ADSelfService Plus Information Disclosure Vulnerability (CNVD-2020-04705)
ZOHO ManageEngine ADSelfService Plus is a Web-based end-user password management software from ZOHO. An information disclosure vulnerability exists in ZOHO ManageEngine ADSelfService Plus version 5.6 Build 5607, which can be exploited by an attacker to retrieve internal information about the syst...
Mapserver Input Validation Error Vulnerability
Mapserver is the Open Source Geospatial OSGeo Foundation's suite of open source platforms for publishing spatial data and interactive map applications to the Web. An input validation error vulnerability in Mapserver versions 5.2, 5.4, and 5.6 prior to 5.6.5-2, which stems from the program failing...
PT-2019-7256 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: events-manager plugin versions prior to 5.6 Description: The issue concerns a cross-site scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...
ALPINE-CVE-2019-2737
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Pluggable Auth. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...
UBUNTU-CVE-2019-2739
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructu...