Lucene search
+L

567 matches found

NVD
NVD
added 2025/07/15 8:15 p.m.8 views

CVE-2025-50081

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

3.1CVSS0.00244EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/07/15 8:0 p.m.2 views

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass in the HTTP client. An attacker can obtain sensitive information by sending specially crafted HTTP requests that exploit improper header handling. Remediation A fix was pushed into the master branch but not yet...

8.6CVSS6.6AI score0.00501EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/15 7:27 p.m.7 views

CVE-2025-50081

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

3.1CVSS6.4AI score0.00244EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/07/12 5:16 p.m.14 views

CVE-2025-49462

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access...

3.5CVSS5.7AI score0.00218EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/11 7:15 p.m.10 views

CVE-2025-3631

An IBM MQ 9.3 and 9.4 Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it...

7.5CVSS0.00316EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/07/08 12:0 a.m.6 views

PT-2025-28548

Name of the Vulnerable Software and Affected Versions: Microsoft Remote Desktop Client affected versions not specified Description: A relative path traversal flaw exists in the Remote Desktop Client, potentially allowing an unauthorized attacker to execute code over a network. Malicious Remote...

10CVSS6.9AI score0.00935EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
added 2025/06/25 12:0 a.m.4 views

RHEL 9 : weldr-client (RHSA-2025:9635)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:9635 advisory. Command line utility to control osbuild-composer Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http...

9.1CVSS7.2AI score0.00778EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/06/21 12:0 a.m.9 views

PT-2025-26523 · Unknown · Psono-Client

Name of the Vulnerable Software and Affected Versions: Psono-Client affected versions not specified Description: A Cross-Site Scripting XSS issue has been identified in Psono-Client's handling of vault entries of type website password and bookmark, as used in Bitdefender SecurePass. The client do...

9.3CVSS5.6AI score0.00485EPSS
SaveExploits0References8
IBM Security Bulletins
IBM Security Bulletins
added 2025/06/19 5:35 a.m.17 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-3440 DESCRIPTION: IBM Security Guardium is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the W...

7.5CVSS7.9AI score0.01023EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2025/06/10 11:48 a.m.6 views

BIT-MARIADB-MIN-2021-2011

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client...

7.1CVSS5.6AI score0.03028EPSS
SaveExploits0References6
OSV
OSV
added 2025/06/10 11:48 a.m.4 views

BIT-MARIADB-MIN-2021-2007

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

4.3CVSS3.8AI score0.02272EPSS
SaveExploits0References6
OSV
OSV
added 2025/06/10 11:47 a.m.4 views

BIT-MARIADB-MIN-2020-2922

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

4.3CVSS3.8AI score0.02436EPSS
SaveExploits0References5
OSV
OSV
added 2025/06/10 11:47 a.m.7 views

BIT-MARIADB-MIN-2020-2752

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.47 and prior, 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

5.3CVSS6.2AI score0.02317EPSS
SaveExploits0References8
OSV
OSV
added 2025/06/10 11:47 a.m.3 views

BIT-MARIADB-MIN-2020-2574

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

5.9CVSS5.9AI score0.03485EPSS
SaveExploits0References8
OSV
OSV
added 2025/06/10 11:47 a.m.3 views

BIT-MARIADB-MIN-2020-14550

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

5.3CVSS5.4AI score0.02221EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2025/05/29 12:0 a.m.8 views

The vulnerability of the client creation function of the VideoGrace software allows a hacker to execute XSS attacks.

The vulnerability of the client creation function of the VideoGrace video conferencing software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.4AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 8:16 a.m.10 views

CVE-2024-36066

The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CMP includes password-based MAC as one of the options for message integrity and authentication the...

3.1CVSS7.1AI score0.00168EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:2 a.m.9 views

CVE-2023-45887

DS Wireless Communication DWC with DWCVERSION3 and DWCVERSION11 allows remote attackers to execute arbitrary code on a game-playing client's machine via a modified GPCM message...

9.8CVSS8AI score0.01566EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2025/05/23 3:51 a.m.10 views

CVE-2023-32955

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in DHCP Client Functionality in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors...

8.1CVSS7.9AI score0.01252EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:43 a.m.6 views

CVE-2023-30609

matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page. Prior to version 3.71.0, plain text messages containing HTML tags are rendered as HTML in the search results. To exploit this, an attacker needs to trick a user into searching for a specific message...

5.4CVSS6.2AI score0.00617EPSS
SaveExploits0References1
Rows per page
Query Builder