18846 matches found
Ubuntu 22.04 LTS : LibTIFF vulnerabilities (USN-6644-2)
The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6644-2 advisory. USN-6644-1 fixed vulnerabilities in LibTIFF. This update provides the corresponding updates for Ubuntu 22.04 LTS. Tenable has extracted the preceding...
taskhub 2.8.7 - SQL Injection
Exploit Title: taskhub 2.8.7 - SQL Injection Exploit Author: CraCkEr Date: 05/09/2023 Vendor: Infinitie Technologies Vendor Homepage: https://www.infinitietech.com/ Software Link: https://codecanyon.net/item/taskhub-project-management-finance-crm-tool/25685874 Demo: https://taskhub.company/auth...
dns/c-ares -- malformatted file causes application crash
c-ares project reports: Reading malformatted /etc/resolv.conf, /etc/nsswitch.conf or the HOSTALIASES file could result in a crash...
Unspecified Vulnerability in Oracle MySQL (CNVD-2024-11119)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server version 8.0.35 and earlier, version 8.2.0 and earlier, which can be exploited by an...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2024-27520)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause an application to hang or crash repeatedly and frequently...
Unspecified Vulnerability in Oracle MySQL (CNVD-2024-11152)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server version 8.0.35 and earlier, version 8.2.0 and earlier. An attacker can exploit this...
Unspecified Vulnerability in Oracle MySQL (CNVD-2024-11157)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server version 8.0.35 and earlier, version 8.2.0 and earlier. An attacker can exploit this...
Unspecified Vulnerability in Oracle MySQL (CNVD-2024-11153)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server version 8.0.35 and earlier, version 8.2.0 and earlier. An attacker can exploit this...
Gnu Coreutils Buffer Overflow Vulnerability
Gnu Coreutils is a core toolset of the GNU community. Gnu Coreutils suffers from a buffer overflow vulnerability that stems from the presence of a heap overflow, which can be exploited by an attacker to cause an application crash and denial of service...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2024-27518)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server. An attacker could exploit this vulnerability to cause an application to hang or crash repeatedly and frequently...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2024-21672)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server versions 8.0.35 and earlier, 8.2.0 and earlier, which can be exploited by an attacke...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2024-21674)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server versions 8.0.35 and earlier, 8.2.0 and earlier, which can be exploited by an attacke...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2024-27519)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server. An attacker could exploit this vulnerability to cause an application to hang or crash repeatedly and frequently...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2024-27521)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server. An attacker could exploit this vulnerability to cause an application to hang or crash repeatedly and frequently...
Unspecified Vulnerability in Oracle MySQL (CNVD-2024-11120)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server version 8.0.35 and earlier, version 8.2.0 and earlier. An attacker can exploit this...
Unspecified Vulnerability in Oracle MySQL (CNVD-2024-11154)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server version 8.0.35 and earlier, version 8.2.0 and earlier. An attacker can exploit this...
Unspecified Vulnerability in Oracle MySQL (CNVD-2024-11158)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL for MySQL Server version 8.0.35 and earlier, version 8.2.0 and earlier. An attacker can exploit this...
Oracle MySQL Denial of Service Vulnerability (CNVD-2024-09900)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A denial of service vulnerability exists in MySQL Server, which can be exploited by an attacker to cause an application to hang or crash frequently a...
CVE-2023-6247
CVE-2023-6247 affects the OpenVPN 3 Core Library up to version 3.8.3. The root cause is that the PKCS#7 parser did not properly validate the parsed data, which can cause the application to crash (availability impact). The advisory notes an in-scope impact of crashes, with CVSS 3.1 vector indicati...
