PT-2018-2401 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.12 and prior Description: The issue is related to insufficient access control in the Server: DDL component of Oracle MySQL, allowing a remote attacker to modify file permissions or cause a denial of service. Successf...

Smooth Site Group CMS system suffers from xml entity injection vulnerability

Smooth Web Group CMS System is a management system developed by Liaoning Smooth Data Communication Co., Ltd. which is mainly applied to the construction of Liaoning education campus informatization management platform, healthcare informatization management system, enterprise resource management...

Microsoft Windows Defender AV: Specify the day of the week to check for definition updates

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavspecifydaydefinitionupdates.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Specify the day of the week to check for definition updates Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

CVE-2018-15160

The libesedbcatalogdefinitionread function in libesedbcatalogdefinition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments...

UBUNTU-CVE-2018-15160

DISPUTED The libesedbcatalogdefinitionread function in libesedbcatalogdefinition.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments...

PT-2018-12915 · Libesedb · Libesedb

Name of the Vulnerable Software and Affected Versions: libesedb versions through 2018-04-01 Description: The issue allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. This is due to a problem in the libesedb catalog definition read function in libesedb catalog...

CVE-2017-17762

XML external entity XXE vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx...

mysql: Server: DDL unspecified vulnerability (CPU Oct 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

Dell EMC Data Protection Advisor XML External Entity Vulnerability

Dell EMC Data Protection Advisor is a data protection management solution from Dell, Inc. The solution supports automated and centralized execution of all such data collection and analysis, as well as obtaining a single comprehensive view of the data protection environment and activities. An XML...

Oracle MySQL Server Component Denial of Service Vulnerability (CNVD-2019-07341)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: DDL subcomponent of the MySQL Server 8.0.11 and earlier components of Oracle MySQL. An attacker could...

Oracle MySQL Server Component Denial of Service Vulnerability (CNVD-2019-07340)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: DDL subcomponent of the MySQL Server 8.0.11 and earlier components of Oracle MySQL. An attacker could...

PT-2018-3900 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.11 and prior Description: The issue is related to inadequate access control in the Server: DDL component of Oracle MySQL Server. This can be exploited by a remote attacker to cause a denial of service via the...

PT-2018-3901 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.11 and prior Description: The issue is related to insufficient protection of service data in the MySQL Server component, specifically in the Server: DDL subcomponent. It allows a high-privileged attacker with network...

md4c buffer overflow vulnerability (CNVD-2018-15761)

md4c is a C-based Markdown a markup language parser . A buffer overflow vulnerability exists in the 'mdislinkreferencedefinitionhelper' function in version 0.2.5 of md4c, which stems from the program failing to properly handle loop termination. An attacker could use this vulnerability to cause a...

definition-of.com XSS vulnerability

Open Bug Bounty ID: OBB-615910 Description| Value ---|--- Affected Website:| definition-of.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ansible-tower: Remote code execution by users with access to define variables in job templates

Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server...

CVE-2018-1104

Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server...

UBUNTU-CVE-2017-0366

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration...

Debian DSA-4157-1 : openssl - security update

Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2017-3738 David Benjamin of Google reported an overflow bug in the AVX2 Montgomery multiplication procedure used in...

CVE-2018-0739

Constructed ASN.1 types with a recursive definition such as can be found in PKCS7 could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so...