176 matches found
CVE-2020-2934
Removed by vendor...
[SECURITY] [DSA 4586-1] ruby2.5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4586-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2019 https://www.debian.org/security/faq -...
CVE-2019-2789
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
CVE-2018-3187
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...
CVE-2018-1252
CVE-2018-1252 affects RSA Web Threat Detection versions prior to 6.4, where an SQL injection vulnerability exists in the Administration and Forensics applications. An authenticated attacker with low privileges could supply specially crafted input to exploit this flaw and execute SQL commands on t...
Oracle FLEXCUBE Universal Banking Remote Vulnerability (CNVD-2017-21027)
Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle FLEXCUBE Universal Banking is one of the real-time, online coverage of retail, group...Oracle FLEXCUBE Universal Banking is a...
CVE-2017-3464
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoco...
CVE-2016-5552
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with...
abctab2ps 1.6.3 - Trim_Title .ABC File Remote Buffer Overflow
abctab2ps 1.6.3 - TrimTitle .ABC File Remote Buffer Overflow source: https://www.securityfocus.com/bid/12028/info abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied...
CVE-2004-0308
Unknown vulnerability in Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS15600 before 1.30 allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell...
Squid %xx URL Encoding ACL Bypass
The remote squid caching proxy, according to its version number, is vulnerable to a flaw that could allow an attacker to gain access to unauthorized resources. The flaw itself consists of sending a malformed username containing the %00 null character, which could allow an attacker to access...
CVE-2004-0017
Multiple SQL injection vulnerabilities in the 1 calendar and 2 infolog modules for phpgroupware 0.9.14 allow remote attackers to perform unauthorized database operations...
Alt-N MDaemon 6.xWorldClient - Form2Raw Raw Message Handler Buffer Overflow (1)
Alt-N MDaemon 6.xWorldClient - Form2Raw Raw Message Handler Buffer Overflow 1 // source: https://www.securityfocus.com/bid/9317/info It has been reported that MDaemon/WorldClient mail server may be prone to a buffer overflow vulnerability when handling certain messages with a 'From' field of over...
My_eGallery Module 3.1.1 - Remote File Inclusion Command Injection
source: https://www.securityfocus.com/bid/9113/info A problem has been identified in the handling of input by MyeGallery. Because of this, it may be possible for a remote user to gain unauthorized access to a system using the vulnerable software. MyeGallery exploit Spawn bash style Shell with...
MySQL 3.23.x/4.0.x Remote Exploit
No description provided by source. / Mysql 3.23.x/4.0.x remote exploit proof of concept using jmp eax bkbll bkbll cnhonker.net,bkbll tom.com 2003/09/12 compile:gcc -o mysql mysql.c -L/usr/lib/mysql -lmysqlclient DO NOT DISTRUBITED IT / include stdio.h include stdlib.h include unistd.h include...
VMWare unauthorized access
WMVare unprivileged access...
Working Resources 1.7.x2.15 BadBlue - ext.dll Command Execution
Working Resources 1.7.x2.15 BadBlue - ext.dll Command Execution source: https://www.securityfocus.com/bid/7387/info BadBlue is prone to a vulnerability that could allow remote attackers to gain unauthorized access. This is due to an input validation issue in the 'ext.dll' component that could all...
Passlog Daemon 0.1 - 'SL_Parse' Remote Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/7261/info It has been reported that passlogd does not properly handle some types of input. Because of this, an attacker may be able to gain unauthorized access to hosts running the vulnerable software. / Title: Remote Multiple Buffer Overflow...
KeyFocus (KF) Web Server Null Byte Request Restricted File / Directory Access
The installed version of KF Web Server returns a directory listing when the request URL contains a URL-encoded NULL byte %00 after the directory name. C Tenable Network Security, Inc. This script was written starting from roxenpercent.nasl References: From:"Securiteinfo.com"...