Lucene search
+L

5271 matches found

Debian
Debian
added 2016/07/18 4:31 p.m.96 views

[SECURITY] [DSA 3621-1] mysql-connector-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3621-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 18, 2016 https://www.debian.org/security/faq -...

4.9CVSS8.5AI score0.03564EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2016/07/18 12:00 a.m.30 views

Debian Security Advisory DSA 3621-1 (mysql-connector-java - security update)

A vulnerability was discovered in mysql-connector-java, a Java database JDBC driver for MySQL, which may result in unauthorized update, insert or delete access to some MySQL Connectors accessible data as well as read access to a subset of MySQL Connectors accessible data. The vulnerability was...

4.9CVSS0.1AI score0.03564EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2016/07/17 12:00 a.m.26 views

Debian: Security Advisory (DSA-3621-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.9CVSS9.5AI score0.03564EPSS
SaveExploits0References5
exploitpack
exploitpack
added 2016/07/07 12:00 a.m.18 views

Tiki Wiki 15.1 - File Upload

Tiki Wiki 15.1 - File Upload !/usr/bin/python недействительный 31337 Team p4yl04d = https://bethebeast.pl/?p=953 ::ch4n6e 1p:: import requests import json from requests.auth import HTTPBasicAuth url = 'http://192.168.1.152:8080/tiki/vendorextra/elfinder/php/connector.minimal.php' headers = 'Host'...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:00 a.m.13 views

The vulnerability of the InfoSphere Information Server software platform, which allows a perpetrator to circumvent existing access control rules

The vulnerability of the Connector Migration Tool component of the InfoSphere Information Server software platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions related to data creation and...

5.5CVSS5.5AI score0.01028EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:00 a.m.13 views

The vulnerability of WebLogic Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the Oracle WebLogic Server component of the Oracle Fusion Middleware allows malicious actors to compromise the confidentiality, integrity, and accessibility of data by using the WebLogic Tuxedo Connector...

6.8CVSS5.5AI score0.01339EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/06/27 12:00 a.m.39 views

Debian DLA-526-1 : mysql-connector-java security update

A vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J has been discovered that may result in unauthorized update, insert or delete access to some MySQL Connectors accessible data as well as read access to a subset of MySQL Connectors. The issue is addressed b...

4.9CVSS7.9AI score0.03564EPSS
SaveExploits0References4
Debian
Debian
added 2016/06/25 4:56 p.m.95 views

[SECURITY] [DLA 526-1] mysql-connector-java security update

Package : mysql-connector-java Version : 5.1.39-1deb7u1 CVE ID : CVE-2015-2575 A vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J has been discovered that may result in unauthorized update, insert or delete access to some MySQL Connectors accessible data a...

4.9CVSS6.9AI score0.03564EPSS
SaveExploits0
OSV
OSV
added 2016/06/25 12:00 a.m.27 views

DLA-526-1 mysql-connector-java - security update

Bulletin has no description...

4.9CVSS9.1AI score0.03564EPSS
SaveExploits0
OSV
OSV
added 2016/05/16 10:59 a.m.10 views

UBUNTU-CVE-2015-3152

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C aka libmysqlclient before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack...

5.9CVSS6.7AI score0.07083EPSS
SaveExploits1References5
Symantec
Symantec
added 2016/05/09 8:00 a.m.78 views

SA123 : OpenSSL Vulnerabilities 3-May-2016

SUMMARY Blue Coat products using affected versions of OpenSSL are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to intercept and decrypt TLS sessions, obtain arbitrary data from the target's memory stack, or execute arbitrary code through buffer...

10CVSS2.7AI score0.89058EPSS
SaveExploits9Affected Software25
Tenable Nessus
Tenable Nessus
added 2016/05/09 12:00 a.m.690 views

RHEL 7 : Red Hat JBoss Enterprise Application Platform 6.4.7 update (Moderate) (RHSA-2016:0597)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0597 advisory. - tomcat: non-persistent DoS attack by feeding data by aborting an upload CVE-2014-0230 - EAP: HTTPS NIO connector uses no timeout when...

7.8CVSS6.5AI score0.20318EPSS
SaveExploits0References17
OSV
OSV
added 2016/05/06 5:59 p.m.10 views

CVE-2016-2094

The HTTPS NIO Connector allows remote attackers to cause a denial of service thread consumption by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability...

7.5CVSS5.8AI score0.02646EPSS
SaveExploits0References6
NVD
NVD
added 2016/05/06 5:59 p.m.33 views

CVE-2016-2094

The HTTPS NIO Connector allows remote attackers to cause a denial of service thread consumption by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability...

7.5CVSS7.3AI score0.02646EPSS
SaveExploits0References6
Prion
Prion
added 2016/05/06 5:59 p.m.29 views

Design/Logic Flaw

The HTTPS NIO Connector allows remote attackers to cause a denial of service thread consumption by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability...

5CVSS7AI score0.02646EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2016/05/06 5:00 p.m.40 views

CVE-2016-2094

The HTTPS NIO Connector allows remote attackers to cause a denial of service thread consumption by opening a socket and not sending an SSL handshake, aka a read-timeout vulnerability...

7.3AI score0.02646EPSS
SaveExploits0References6
CVE
CVE
added 2016/05/06 5:00 p.m.85 views

CVE-2016-2094

The vulnerability CVE-2016-2094 affects Tomcat’s HTTPS NIO Connector, where a remote attacker can cause a denial of service by opening a socket and not sending an SSL handshake, triggering a read-timeout and thread consumption. The provided documents describe the vulnerability and impact but do n...

7.5CVSS7.2AI score0.02646EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2016/04/12 2:59 p.m.7 views

UBUNTU-CVE-2016-2166

The 1 proton.reactor.Connector, 2 proton.reactor.Container, and 3 proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might allow man-in-the-middle attackers to obtain...

6.5CVSS6.6AI score0.04267EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2016/04/12 12:00 a.m.11 views

PT-2016-5042 · Apache +1 · Apache Qpid Proton +1

Name of the Vulnerable Software and Affected Versions: Apache Qpid Proton versions prior to 0.12.1 Description: The issue is related to the improper use of an unencrypted connection for an amqps URI scheme when SSL support is unavailable in certain classes. This might allow attackers to obtain...

6.5CVSS6AI score0.04267EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
added 2016/04/08 12:00 a.m.26 views

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-431)

This update for java-170-openjdk fixes the following issues : java-170-openjdk was updated to 2.6.5 - OpenJDK 7u99 boo972468 - Security fixes - S8152335, CVE-2016-0636: Improve MethodHandle consistency - Import of OpenJDK 7 u99 build 0 - S6425769, PR2858: Allow specifying an address to bind JMX...

9.3CVSS7.6AI score0.05765EPSS
SaveExploits0References2
Rows per page
Query Builder