Distinct Intranet Servers Security Vulnerability

Distinct Intranet Servers is a server software package from Distinct, Inc. It includes FTP, TFTP, LPD and BOOTP servers. A security vulnerability exists in Distinct Intranet Servers 3.10 and earlier versions that stems from a multiple directory traversal vulnerability in the TFTP server, which...

CVE-2012-6664

Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read or write arbitrary files via a .. dot dot in the 1 get or 2 put commands...

BIT-MYSQL-CLIENT-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

BIT-MARIADB-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

CVE-2024-25003

creationtimestamp| type| source ---|---|--- 2024-02-09 08:21:53+00:00| seen| https://t.me/ctinow/181862 2024-02-11 15:49:09+00:00| seen| https://t.me/arpsyndicate/3429 2024-02-14 08:57:00+00:00| seen| https://t.me/ctinow/184479 2024-02-14 17:16:44+00:00| seen| https://t.me/ctinow/184829 2024-03-0...

CVE-2023-50136

creationtimestamp| type| source ---|---|--- 2024-01-09 23:26:33+00:00| seen| https://t.me/ctinow/165429 2024-01-16 21:16:47+00:00| seen| https://t.me/ctinow/169006 2024-01-28 08:26:42+00:00| seen| https://t.me/ctinow/174855...

CVE-2023-38653

creationtimestamp| type| source ---|---|--- 2024-01-08 16:32:24+00:00| seen| https://t.me/ctinow/164467 2024-01-11 21:17:12+00:00| seen| https://t.me/ctinow/166839 2024-01-25 13:46:26+00:00| seen| https://t.me/ctinow/173440...

CVE-2023-33036

creationtimestamp| type| source ---|---|--- 2024-01-02 07:27:03+00:00| seen| https://t.me/ctinow/161524 2024-01-03 01:33:06+00:00| seen| https://t.me/cibsecurity/74150 2024-01-22 16:13:56+00:00| seen| https://t.me/ctinow/171252...

CVE-2023-29485

creationtimestamp| type| source ---|---|--- 2023-12-21 02:22:26+00:00| seen| https://t.me/ctinow/157459 2023-12-29 08:16:38+00:00| seen| https://t.me/ctinow/160368 2024-01-14 08:36:57+00:00| seen| https://t.me/ctinow/167963...

mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

CVE-2022-46804

Improper Neutralization of Formula Elements in a CSV File vulnerability in Narola Infotech Solutions LLP Export Users Data Distinct.This issue affects Export Users Data Distinct: from n/a through 1.3...

Input validation

Improper Neutralization of Formula Elements in a CSV File vulnerability in Narola Infotech Solutions LLP Export Users Data Distinct.This issue affects Export Users Data Distinct: from n/a through 1.3...

CVE-2022-46804

CVE-2022-46804 : WordPress plugin Export Users Data Distinct (

CVE-2022-46804 WordPress Export Users Data Distinct plugin <= 1.3 - CSV Injection

A vulnerability in narolainfotech Export Users Data Distinct export-users-data-distinct.This issue affects Export Users Data Distinct: from n/a through = 1.3...

BIT-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

CVE-2023-22277

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22317 and CVE-2023-22314...

Medium: mariadb

Issue Overview: getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW. CVE-2021-46659 MariaDB through...

CLSA-2023-1681491763 curl: Fix of 3 CVEs

CVE-2023-27533: prevent TELNET option from IAC injection - CVE-2023-27535: fix behavior when FTP too eager connection reuse - CVE-2023-27536: do not reuse connections with different GSS delegations...

WordPress Export Users Data Distinct Plugin <= 1.3 is vulnerable to CSV Injection

Software Export Users Data Distinct Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2022-46804 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID b4f52c7c2803 Credits Mika Required privilege Subscriber Publish...

AZL-78992 CVE-2022-41725 affecting package golang 1.25.7-1

A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request...