Lucene search
+L

286 matches found

CNVD
CNVD
added 2022/09/28 12:0 a.m.24 views

Bifrost Licensing Issue Vulnerability

Bifrost is a middleware package that synchronizes MySQL MariaDB binary log data to other types of databases.Bifrost 1.8.6-release and earlier versions are vulnerable to authorization issues, which stem from its vulnerability to authentication bypass when using HTTP basic authentication, which can...

8.5CVSS3.3AI score0.00911EPSS
Exploits1References1
OSV
OSV
added 2022/09/27 3:45 p.m.20 views

GHSA-P6FH-XC6R-G5HW Brokercap Bifrost subject to authentication bypass when using HTTP basic authentication

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

8.5CVSS7.2AI score0.00911EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2022/09/27 3:45 p.m.33 views

Brokercap Bifrost subject to authentication bypass when using HTTP basic authentication

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

8.5CVSS6.5AI score0.00911EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2022/09/26 2:15 p.m.40 views

CVE-2022-39219

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

8.5CVSS0.00911EPSS
Exploits1References3
Prion
Prion
added 2022/09/26 2:15 p.m.19 views

Authentication flaw

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

4CVSS6.6AI score0.00911EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2022/09/26 1:15 p.m.73 views

CVE-2022-39219

Summary: CVE-2022-39219 affects the Bifrost middleware (used to synchronize MySQL/MariaDB binlogs to other databases). Versions 1.8.6-release and earlier are vulnerable to an authentication bypass when HTTP basic authentication is used, potentially allowing a user with read permissions to perform...

8.5CVSS7.1AI score0.00911EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/09/26 1:15 p.m.29 views

CVE-2022-39219 Bifrost users using basic authntication can bypass write permission limit

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

8.5CVSS7.6AI score0.00911EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2022/09/26 1:15 p.m.8 views

CVE-2022-39219 Bifrost users using basic authntication can bypass write permission limit

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

8.5CVSS8.8AI score0.00911EPSS
Exploits1References3
Cvelist
Cvelist
added 2022/09/26 1:15 p.m.36 views

CVE-2022-39219 Bifrost users using basic authntication can bypass write permission limit

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

8.5CVSS8.8AI score0.00911EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/09/26 12:0 a.m.6 views

PT-2022-24818 · Oracle +1 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Bifrost versions 1.8.6-release and prior Description: Bifrost is a middleware package that synchronizes MySQL/MariaDB binlog data to other types of databases. The issue allows group members with only read permissions to write requests when th...

8.5CVSS7AI score0.00911EPSS
Exploits1References10
CNNVD
CNNVD
added 2022/09/26 12:0 a.m.6 views

Bifrost 授权问题漏洞

Bifrost is a middleware package that synchronizes MySQL MariaDB binary log data to other types of databases.Bifrost 1.8.6-release and earlier versions are vulnerable to authorization issues, which stem from its vulnerability to authentication bypass when using HTTP basic authentication, which can...

8.5CVSS6.9AI score0.00911EPSS
Exploits1References4
OSV
OSV
added 2022/09/01 3:15 a.m.2 views

CVE-2022-36449

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0,...

6.5CVSS5.9AI score0.00908EPSS
Exploits1References5
Prion
Prion
added 2022/09/01 3:15 a.m.28 views

Out-of-bounds

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0,...

6.4CVSS6.7AI score0.00908EPSS
Exploits1References5Affected Software3
Positive Technologies
Positive Technologies
added 2022/08/12 12:0 a.m.6 views

PT-2022-6092 · Arm · Arm Mali Gpu Kernel Driver

Name of the Vulnerable Software and Affected Versions: Arm Mali GPU kernel driver versions Bifrost r0p0 through r39p0 Arm Mali GPU kernel driver versions Valhall r19p0 through r39p0 Arm Mali GPU kernel driver versions Midgard r4p0 through r32p0 Description: The issue is related to the mishandling...

10CVSS6.7AI score0.12588EPSS
Exploits4References17
Positive Technologies
Positive Technologies
added 2022/07/24 12:0 a.m.4 views

PT-2022-6153 · Arm · Arm Mali Gpu Kernel Driver

Name of the Vulnerable Software and Affected Versions: Arm Mali GPU Kernel Driver versions Midgard r4p0 through r32p0 Arm Mali GPU Kernel Driver versions Bifrost r0p0 through r38p0 and r39p0 before r38p1 Arm Mali GPU Kernel Driver versions Valhall r19p0 through r38p0 and r39p0 before r38p1...

6.5CVSS7.2AI score0.00908EPSS
Exploits1References11
OSV
OSV
added 2022/05/19 2:15 a.m.3 views

CVE-2022-28349

Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 through r23p0 before r24p0, and Valhall r19p0 through r23p0 before r24p0...

9.8CVSS5.8AI score0.01329EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/19 2:15 a.m.3 views

CVE-2022-28349

Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 through r23p0 before r24p0, and Valhall r19p0 through r23p0 before r24p0...

10CVSS5.9AI score0.01329EPSS
Exploits0References3
Prion
Prion
added 2022/05/19 2:15 a.m.16 views

Double free

Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 through r23p0 before r24p0, and Valhall r19p0 through r23p0 before r24p0...

10CVSS9.3AI score0.01329EPSS
Exploits0References2Affected Software3
ATTACKERKB
ATTACKERKB
added 2022/05/19 1:15 a.m.9 views

CVE-2022-28348

Arm Mali GPU Kernel Driver Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0 allows improper GPU memory operations to reach a use-after-free situation...

10CVSS5.9AI score0.01357EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/05/19 1:4 a.m.38 views

CVE-2022-28349

Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 through r23p0 before r24p0, and Valhall r19p0 through r23p0 before r24p0...

9.7AI score0.01329EPSS
Exploits0References2
Rows per page
Query Builder