982 matches found
mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504...
USN-2954-1 mysql-5.7 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.7.12 in Ubuntu 16.04 LTS. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes...
Oracle MySQL Server: Optimizer Subcomponent Denial of Service Vulnerability (CNVD-2016-02496)
Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability exists in the Server: Optimizer subcomponent of Oracle MySQL 5.7.10 and earlier versions, which can be exploited by a local attacker to cause a denial of service and impact data availability...
Oracle MySQL Server: Optimizer Subcomponent Denial of Service Vulnerability (CNVD-2016-02471)
Oracle MySQL is an open source relational database management system from Oracle. A denial of service vulnerability exists in the Server: Optimizer subcomponent of Oracle MySQL 5.7.11 and earlier versions, which can be exploited by an attacker to cause a denial of service and impact data...
Oracle MySQL Server: Locking Subcomponent Denial of Service Vulnerability
Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A denial of service vulnerability exists in the Server: Locking subcomponent of Oracle MySQL 5.7.11 and earlier versions. A...
PT-2016-3556 · Red Hat · Spacewalk +1
Name of the Vulnerable Software and Affected Versions: Spacewalk and Red Hat Satellite version 5.7 Description: A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the XMLRPC API, involving user details...
Red Hat Network Satellite Cross-Site Scripting Vulnerability
Red Hat Network Satellite RHN Satellite, Red Hat Network Satellite is a set of system management platforms from the American company Red Hat Red Hat. The platform can be used to extend the Linux infrastructure and provide system management functions such as administration, configuration and...
Red Hat Network Satellite Cross-Site Scripting Vulnerability (CNVD-2016-01994)
Red Hat Network Satellite RHN Satellite, Red Hat Network Satellite is a set of system management platforms from the American company Red Hat Red Hat. The platform can be used to extend the Linux infrastructure and provide system management functions such as administration, configuration and...
UBUNTU-CVE-2016-0503
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504...
UBUNTU-CVE-2016-0504
Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0503...
Cisco Secure Access Control Server Cross-Site Scripting Vulnerability
Cisco Secure Access Control Server that is ACS, is the United States Cisco Cisco a security access control server. A cross-site scripting vulnerability exists in Cisco Secure Access Control Server 5.7. This allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
DedeCMS Arbitrary Code Execution Vulnerability
DedeCms is a free PHP web content management system. DeDeCMS 5.7-sp1 and earlier versions suffer from an arbitrary code execution vulnerability in the implementation, which can be exploited by an attacker to execute arbitrary code in the application context...
PT-2015-4022 · Red Hat · Red Hat Network Satellite +1
Name of the Vulnerable Software and Affected Versions: Red Hat Network Satellite versions 5.7 and earlier Spacewalk versions 5.7 and earlier Description: The issue is related to an XML external entity XXE in the RPC interface. This allows remote attackers to read arbitrary files and possibly have...
PT-2015-3929 · Red Hat · Red Hat Network Satellite +1
Name of the Vulnerable Software and Affected Versions: Red Hat Network Satellite versions prior to 5.7.0 Spacewalk versions prior to 5.7.0 Description: A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field. This could...
Spacewalk: XSS in system-group
Cross-site scripting XSS vulnerability in Spacewalk and Red Hat Network RHN Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field...
OpenJDK: getEnclosing* checks (Libraries, 8007812)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different...
JDK: unspecified vulnerability fixed in 6u39 and 7u13 (JMX)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confidentiality via vectors related to JMX...
PT-2010-2250 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 SP4 through 7 Description: A race condition in the software allows remote attackers to execute arbitrary code via a crafted HTML document, triggering memory corruption. The issue exists in the way the...
