Lucene search
+L

3193 matches found

Positive Technologies
Positive Technologies
added 2023/02/01 12:0 a.m.13 views

PT-2023-7464 · Intel · Intel Trace Analyzer/Collector

Name of the Vulnerable Software and Affected Versions: IntelR Trace Analyzer and Collector versions prior to 2021.8.0 Description: The issue is related to a stack-based buffer overflow in IntelR Trace Analyzer and Collector software. This may allow an authenticated user to potentially enable...

7.8CVSS7.8AI score0.00201EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/01/27 12:0 a.m.9 views

The vulnerability of the Visual Analyzer component of the Oracle Business Intelligence Enterprise Edition software platform allows a malicious individual to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Visual Analyzer component of the Oracle Business Intelligence Enterprise Edition software is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete...

6.4CVSS6.6AI score0.00377EPSS
SaveExploits0References3Affected Software1
NCSC
NCSC
added 2023/01/24 12:0 a.m.11 views

Vulnerabilities fixed in SolarWinds Database Performance Analyzer

SolarWinds has fixed vulnerabilities in Database Performance Analyzer DPA. An authenticated malicious party can exploit the exploit the vulnerabilities to gain access to sensitive data or perform a cross-site scripting attack. SolarWinds has released updates to address the vulnerabilities fixes i...

7.5CVSS6.9AI score0.00412EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2023/01/23 2:31 p.m.16 views

sssd bug fix and enhancement update

An update is available for sssd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

1.5AI score
SaveExploits0
OSV
OSV
added 2023/01/20 6:15 p.m.6 views

CVE-2022-38110

In Database Performance Analyzer DPA 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting...

5.4CVSS5.7AI score0.00398EPSS
SaveExploits0References2
Prion
Prion
added 2023/01/20 6:15 p.m.23 views

Cross site scripting

In Database Performance Analyzer DPA 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting...

4.9CVSS5.2AI score0.00398EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/01/20 12:0 a.m.7 views

Database Performance Analyzer 安全漏洞

SolarWinds Database Performance Analyzer Dpa is a database performance analyzer from SolarWinds, Inc. It is used to monitor, diagnose, and resolve performance issues with many types of database instances. A security vulnerability exists in Database Performance Analyzer DPA version 2022.4 and...

7.5CVSS7.3AI score0.00412EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/01/20 12:0 a.m.7 views

Database Performance Analyzer 跨站脚本漏洞

SolarWinds Database Performance Analyzer Dpa is a database performance analyzer from SolarWinds, Inc. It is used to monitor, diagnose, and resolve performance issues with many types of database instances. A cross-site scripting vulnerability exists in Database Performance Analyzer DPA version...

5.4CVSS5.3AI score0.00398EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/01/20 12:0 a.m.6 views

PT-2023-13592 · Unknown · Database Performance Analyzer

Name of the Vulnerable Software and Affected Versions: Database Performance Analyzer DPA versions 2022.4 and older Description: The issue concerns authenticated reflected cross-site scripting, where certain URL vectors are susceptible to this type of attack. Recommendations: For versions 2022.4 a...

5.4CVSS5.2AI score0.00398EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/01/20 12:0 a.m.11 views

CVE-2022-38110 Reflected Cross-Site Scripting Vulnerability

In Database Performance Analyzer DPA 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting...

5.4CVSS5.5AI score0.00398EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/01/20 12:0 a.m.25 views

CVE-2022-38110 Reflected Cross-Site Scripting Vulnerability

In Database Performance Analyzer DPA 2022.4 and older releases, certain URL vectors are susceptible to authenticated reflected cross-site scripting...

5.4CVSS5.5AI score0.00398EPSS
SaveExploits0References2
CVE
CVE
added 2023/01/20 12:0 a.m.58 views

CVE-2022-38110

SolarWinds Database Performance Analyzer (DPA) versions 2022.4 and older are vulnerable to authenticated reflected cross‑site scripting via certain URL vectors. The root cause is exposure of URL handling that can reflect input back to authenticated users, enabling XSS within affected sessions. Af...

5.4CVSS5.2AI score0.00398EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
added 2023/01/18 1:43 a.m.317 views

[SECURITY] Fedora 37 Update: awstats-7.8-9.fc37

Advanced Web Statistics is a powerful and full-featured tool that generates advanced web server graphical statistics. This server log analyzer works from the command line or as a CGI and shows all information your log contains, in graphical web pages. It can analyze a lot of web/wap/proxy servers...

6.1CVSS6.2AI score0.00655EPSS
SaveExploits0
Fedora
Fedora
added 2023/01/18 1:41 a.m.215 views

[SECURITY] Fedora 36 Update: awstats-7.8-9.fc36

Advanced Web Statistics is a powerful and full-featured tool that generates advanced web server graphical statistics. This server log analyzer works from the command line or as a CGI and shows all information your log contains, in graphical web pages. It can analyze a lot of web/wap/proxy servers...

6.1CVSS6.2AI score0.00655EPSS
SaveExploits0
OSV
OSV
added 2023/01/18 12:15 a.m.7 views

CVE-2023-21891

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Visual Analyzer. Supported versions that are affected are 5.9.0.0.0 and 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.4CVSS6.7AI score0.00377EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/18 12:15 a.m.7 views

CVE-2023-21892

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Visual Analyzer. Supported versions that are affected are 5.9.0.0.0 and 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.4CVSS6.7AI score0.00377EPSS
SaveExploits0References1
Prion
Prion
added 2023/01/18 12:15 a.m.25 views

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Visual Analyzer. Supported versions that are affected are 5.9.0.0.0 and 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

4.9CVSS5.2AI score0.00377EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/01/18 12:15 a.m.20 views

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Visual Analyzer. Supported versions that are affected are 5.9.0.0.0 and 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

4.9CVSS5.2AI score0.00377EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/01/18 12:15 a.m.19 views

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Visual Analyzer. Supported versions that are affected are 5.9.0.0.0 and 6.4.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

4.9CVSS5.2AI score0.00377EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2023/01/18 12:0 a.m.17 views

Fedora: Security Advisory for awstats (FEDORA-2023-fda5480804)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS6.3AI score0.00655EPSS
SaveExploits0References2
Rows per page
Query Builder