Lucene search
K

1175 matches found

CNVD
CNVD
added 2020/07/16 12:0 a.m.1 views

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-41754)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server 8.0.20 and prior versions of Server: Security: Privileges component of Oracle MySQL. An attacker...

7.2CVSS7.8AI score0.00789EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/16 12:0 a.m.1 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40800)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

7.5CVSS9AI score0.00169EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/16 12:0 a.m.3 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40794)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

7.5CVSS9AI score0.00169EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/16 12:0 a.m.2 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40793)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

6.5CVSS9AI score0.00302EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/16 12:0 a.m.1 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-40799)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

7.5CVSS9.1AI score0.00091EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/16 12:0 a.m.2 views

Unspecified Vulnerability in Oracle GraalVM Enterprise Edition JVMCI Component

Oracle GraalVM is the United States Oracle Oracle company's set of instant compiler written in the Java language. The product supports a variety of programming languages and execution modes.GraalVM Enterprise Edition is the enterprise version of GraalVM. A security hole exists in the Oracle Graal...

7.2CVSS9.1AI score0.01318EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/15 12:0 a.m.4 views

Unspecified Vulnerability in Oracle GoldenGate (CNVD-2020-43707)

OOracle GoldenGate is a comprehensive package for real-time data integration and replication in IT environments from Oracle USA. The product supports real-time data integration, transactional change data capture, data services, transformation and validation capabilities. A security vulnerability...

9.6CVSS9AI score0.00457EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.1 views

The vulnerability of the gf_text_get_utf8_line function in the multimedia platform GPAC, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gftextgetutf8line function on the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.5AI score0.00325EPSS
Exploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.2 views

The vulnerability of the gf_sm_load_init function on the GPAC multimedia platform, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gfsmloadinit function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.7AI score0.00217EPSS
Exploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.1 views

The vulnerability of the multimedia platform GPAC, related to reading beyond the buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the multimedia platform GPAC is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.9AI score0.00566EPSS
Exploits1References6Affected Software4
RedHat Linux
RedHat Linux
added 2020/06/11 9:3 a.m.1 views

jackson-databind: Lacks certain xbean-reflect/JNDI blocking

A flaw was found in FasterXML jackson-databind in versions 2.0.0 through 2.9.10.2. A "gadget" exploit is possible due to a lack of a Java object being blocking from being deserialized. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabili...

9.8CVSS7.1AI score0.07911EPSS
Exploits5References4
RedHat Linux
RedHat Linux
added 2020/06/10 7:23 p.m.2 views

jackson-databind: Serialization gadgets in ibatis-sqlmap

A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.1AI score0.38262EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.3 views

The vulnerability in the implementation of the channel between virtual machines of the Cisco IOS operating system arises from insufficient validation of input data. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the implementation of the channel between virtual machines of the Cisco IOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

8.8CVSS7.7AI score0.00368EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.1 views

The vulnerability of the Libraries component of Oracle Java SE and Oracle Java SE Embedded software platforms allows attackers to compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of the Libraries component in Oracle Java SE and Oracle Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity, confidentiality, and accessibility of protected...

8.3CVSS6.6AI score0.01103EPSS
Exploits0References8Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.6 views

The vulnerability of the Information Manager Console component of the Oracle Knowledge business application, which allows a perpetrator to compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of the Information Manager Console component of the Oracle Knowledge business application relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the integrity, confidentiality, and accessibility of protected information...

10CVSS7.7AI score0.01559EPSS
Exploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2020/05/28 6:56 p.m.3 views

freerdp: Out-of-bounds write in interleaved.c

A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...

6.6CVSS5.8AI score0.00632EPSS
Exploits1References4
CNVD
CNVD
added 2020/05/06 12:0 a.m.6 views

Grin has an unspecified vulnerability

Grin is an implementation of the MimbleWimble protocol. A security vulnerability exists in Grin versions prior to 3.1.0. An attacker could exploit the vulnerability to affect the availability of data...

5.3CVSS6.6AI score0.00334EPSS
Exploits0References1
NVD
NVD
added 2020/05/05 10:15 p.m.14 views

CVE-2020-12439

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

5.3CVSS5.3AI score0.00334EPSS
Exploits0References3
Prion
Prion
added 2020/05/05 10:15 p.m.9 views

Design/Logic Flaw

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

5CVSS5.3AI score0.00334EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2020/05/05 9:19 p.m.14 views

CVE-2020-12439

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

5.2AI score0.00334EPSS
Exploits0References3
Rows per page
Query Builder