Lucene search
+L

14995 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•38 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02621EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•35 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.03193EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•30 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

6.5CVSS3.9AI score0.01592EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•40 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02686EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•39 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

6.5CVSS3.9AI score0.01553EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•28 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02621EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•29 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02621EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•30 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

6.5CVSS3.9AI score0.01443EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/01/20 10:15 p.m.•19 views

CVE-2021-46327

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fxArrayprototypesort...

5.5CVSS5.8AI score0.00717EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/20 10:15 p.m.•13 views

CVE-2021-46342

There is an Assertion 'ecmaislexicalenvironment objp || !ecmaopobjectisfastarray objp' failed at /jerry-core/ecma/base/ecma-helpers.c in JerryScript 3.0.0...

5.5CVSS5.9AI score0.00621EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/20 10:15 p.m.•13 views

CVE-2021-46327

Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fxArrayprototypesort...

5.5CVSS5.9AI score0.00717EPSS
SaveExploits1References2
Veracode
Veracode
•added 2022/01/20 6:19 a.m.•51 views

Denial Of Service (DoS)

linux kernel is vulnerable to Denial Of Service DoS. The vulnerability exists due to an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...

5.5CVSS6.6AI score0.00719EPSS
SaveExploits1References12Affected Software5
CNNVD
CNNVD
•added 2022/01/20 12:00 a.m.•24 views

Moddable SDK security vulnerability

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, U.S. A security vulnerability exists in Moddable SDK v11.5.0, which was discovered to contain a SEGV vulnerability via the xs source xarray .c in the fx Array prototype sorting. No details of the...

5.5CVSS5.5AI score0.00717EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/20 12:00 a.m.•14 views

PT-2022-10385 · Teamviewer · Teamviewer

Name of the Vulnerable Software and Affected Versions: TeamViewer affected versions not specified Description: This issue allows local attackers to disclose sensitive information on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on t...

3.3CVSS3.8AI score0.00891EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2022/01/20 12:00 a.m.•47 views

TeamViewer Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TeamViewer...

3.3CVSS3.8AI score0.00891EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/01/20 12:00 a.m.•10 views

PT-2022-12641

Name of the Vulnerable Software and Affected Versions Moddable SDK version 11.5.0 Description A SEGV issue was found in the Moddable SDK via xs/sources/xsArray.c in the fx Array prototype sort function. Recommendations For Moddable SDK version 11.5.0, at the moment, there is no information about ...

5.5CVSS0.00717EPSS
SaveExploits1References3
Code423n4
Code423n4
•added 2022/01/20 12:00 a.m.•26 views

Unbounded loop on array that can only grow can lead to DoS

Handle robee Vulnerability details A malicious attacker that is also a protocol owner can push unlimitedly to an array, that some function loop over this array. If increasing the array size enough, calling the function that does a loop over the array will always revert since there is a gas limit...

6.7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•5 views

CVE-2022-21310: Improper Validation of Array Index

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

6.3CVSS5.6AI score0.02621EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/01/19 12:00 a.m.•23 views

PT-2022-5915

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16-rc6 Description The issue is related to the lkdtm ARRAY BOUNDS function in the drivers/misc/lkdtm/bugs.c module of the Linux kernel. It lacks a check of the return value of kmalloc and will cause a null...

5.5CVSS6.2AI score0.00263EPSS
SaveExploits0References176
NVD
NVD
•added 2022/01/18 8:15 p.m.•32 views

CVE-2021-44839

An issue was discovered in Delta RM 1.2. It is possible to request a new password for any other account using the account ID. Using the /listes/DTsendmaildata/admutilisateur/send-mail.json endpoint, a user can send a JSON array with user IDs that will have their passwords reset and new ones sent ...

6.5CVSS0.00577EPSS
SaveExploits0References2
Rows per page
Query Builder