11594 matches found
MySQL -- multiple vulnerabilities
Oracle reports: MySQL Multiple Flaws Let Remote Authenticated Users Access and Modify Data, Remote and Local Users Deny Service, and Local Users Access Data and Gain Elevated Privileges A local user can exploit a flaw in the Replication component to gain elevated privileges CVE-2018-2755. A remot...
CVE-2018-2409
Improper session management when using SAP Cloud Platform 2.0 Connectivity Service and Cloud Connector. Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform...
CVE-2017-1000244
Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...
PT-2018-1254 · Microsoft · Office Excel +1
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a remote code execution vulnerability in Microsoft Excel software. It occurs when the software fails to properly handle objects in memory, allowing an attack...
mysql: Server: Replication unspecified vulnerability (CPU Jan 2018)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...
mysql: InnoDB unspecified vulnerability (CPU Jan 2018)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
mysql: InnoDB unspecified vulnerability (CPU Jan 2018)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
Etcd REST API Unauthorized Access Vulnerability
etcd is an open source distributed key-value store database. It provides a reliable way to store data across clusters of machines. By default it returns administrative credentials for queries without authentication. An unauthorized access vulnerability exists in the Etcd REST API. An attacker cou...
mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoco...
mysql: Client programs unspecified vulnerability (CPU Jul 2017)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server execut...
Tuleap 9.17.99.189 - Blind SQL Injection
=============================================================================== title: Tuleap SQL Injection case id: CM-2018-01 product: Tuleap version 9.17.99.189 vulnerability type: Blind SQL injection - time based severity: High found: 2018-02-24 by: Cristiano Maruti @cmaruti...
Dongdao network cms has SQL injection vulnerability
Dongdao Network is committed to e-commerce and network product development, business content includes professional website construction and maintenance, B2B B2C e-commerce platform development, construction and operation of large-scale portals, planning and development, B / S-type OA system...
The vulnerability of the InnoDB component of the MySQL database management system allows a hacker to gain privileges for creating, deleting, or modifying data, or to cause service interruptions.
The vulnerability of the InnoDB component of the MySQL database management system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to gain privileges necessary for creating, deleting, or modifying MySQL data, or to cause service failures...
Vulnerability of the Server:Security:Privileges component of the MySQL database management system, which allows a hacker to cause a service failure
The vulnerability of the Server:Security:Privileges component of the MySQL database management system is related to security configuration errors. Exploiting this vulnerability may allow a malicious actor to cause service interruptions by modifying system data remotely...
Vulnerability of the Server:Replication component of the MySQL database management system, which allows a hacker to modify, add, or delete MySQL data, or cause service interruptions.
The vulnerability of the Server:Replication component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to remotely modify, add, or delete MySQL data, or cause service failures...
CVE-2017-5786
A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...
CVE-2017-5786
A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...
Code injection
A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...
CVE-2017-5786
CVE-2017-5786 describes a local Unauthorized Data Modification vulnerability in HP/ HPE OfficeConnect Network Switches, affected in PT.02.01 including PT.01.03–PT.01.14. The flaw allows an attacker with local access and low privileges to modify data (I: HIGH, C: NONE, A: NONE) without user intera...
