Lucene search
+L

928 matches found

Mend
Mend
•added 2017/04/24 7:00 p.m.•1 views

CVE-2017-3458

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

6.9CVSS0.02473EPSS
SaveExploits0References4
Mend
Mend
•added 2017/04/24 7:00 p.m.•1 views

CVE-2017-3456

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple...

6.9CVSS0.02964EPSS
SaveExploits0References11
Mend
Mend
•added 2017/04/24 7:00 p.m.•2 views

CVE-2017-3457

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

6.9CVSS0.02194EPSS
SaveExploits0References4
Mend
Mend
•added 2017/04/24 7:00 p.m.•3 views

CVE-2017-3308

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoco...

8.3CVSS0.03078EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•5 views

CVE-2017-3458: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS5.7AI score0.02473EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•6 views

CVE-2017-3457: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS5.7AI score0.02194EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•7 views

CVE-2017-3331: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. The supported version that is affected is 5.7.11 to 5.7.17. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

6.5CVSS5.8AI score0.03797EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•6 views

CVE-2017-3456: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple...

4.9CVSS7AI score0.02964EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•6 views

CVE-2017-3308: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoco...

7.7CVSS7AI score0.03078EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/04/20 12:00 a.m.•15 views

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-05867)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: DML subcomponent of Oracle MySQL Server 5.7.17 and earlier versions, which can be exploited by an...

4.9CVSS5.9AI score0.02194EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/04/20 12:00 a.m.•13 views

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-05868)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: DML subcomponent of Oracle MySQL Server 5.7.17 and earlier versions, which can be exploited by an...

4.9CVSS5.9AI score0.02194EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2017/04/20 12:00 a.m.•524 views

MySQL 5.7.x < 5.7.18 Multiple Vulnerabilities (April 2017 CPU) (July 2017 CPU)

The version of MySQL running on the remote host is 5.7.x prior to 5.7.18. It is, therefore, affected by multiple vulnerabilities : - A carry propagation error exists in the OpenSSL component in the Broadwell-specific Montgomery multiplication procedure when handling input lengths divisible by but...

7.8CVSS7.4AI score0.89924EPSS
SaveExploits9References32
Tenable Nessus
Tenable Nessus
•added 2017/04/20 12:00 a.m.•130 views

MySQL 5.7.x < 5.7.18 Multiple Vulnerabilities (April 2017 CPU) (July 2017 CPU)

The version of MySQL running on the remote host is 5.7.x prior to 5.7.18. It is, therefore, affected by multiple vulnerabilities : - A carry propagation error exists in the OpenSSL component in the Broadwell-specific Montgomery multiplication procedure when handling input lengths divisible by but...

7.8CVSS7.3AI score0.89924EPSS
SaveExploits9References32
RedhatCVE
RedhatCVE
•added 2017/04/19 7:40 a.m.•36 views

CVE-2017-3457

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS5AI score0.02194EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/04/13 12:00 a.m.•2 views

PT-2017-1967

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.5.54 and earlier MySQL Server versions 5.6.35 and earlier MySQL Server versions 5.7.17 and earlier Description The issue is related to inadequate access control in the MySQL Server component of Oracle MySQL, specificall...

4.9CVSS0.02964EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2017/04/13 12:00 a.m.•2 views

PT-2017-1991

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.5.54 and earlier MySQL Server versions 5.6.35 and earlier MySQL Server versions 5.7.17 and earlier Description The issue is related to inadequate access control in the MySQL Server component, specifically in the Server:...

7.7CVSS0.03078EPSS
SaveExploits0
OSV
OSV
•added 2017/02/22 4:59 p.m.•15 views

CVE-2017-5585

OpenText Documentum Content Server formerly EMC Documentum Content Server 7.3, when PostgreSQL Database is used and returntopresultsrowbased config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary...

8.8CVSS6AI score0.02012EPSS
SaveExploits2References2
Prion
Prion
•added 2017/02/22 4:59 p.m.•30 views

Design/Logic Flaw

OpenText Documentum Content Server formerly EMC Documentum Content Server 7.3, when PostgreSQL Database is used and returntopresultsrowbased config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary...

6.5CVSS8.7AI score0.02012EPSS
SaveExploits2References2Affected Software1
NVD
NVD
•added 2017/02/22 4:59 p.m.•38 views

CVE-2017-5585

OpenText Documentum Content Server formerly EMC Documentum Content Server 7.3, when PostgreSQL Database is used and returntopresultsrowbased config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary...

8.8CVSS8.8AI score0.02012EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2017/02/22 4:00 p.m.•51 views

CVE-2017-5585

OpenText Documentum Content Server formerly EMC Documentum Content Server 7.3, when PostgreSQL Database is used and returntopresultsrowbased config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary...

8.9AI score0.02012EPSS
SaveExploits2References2
Rows per page
Query Builder