CVE-2017-15044: Undefined Security Weakness

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

PT-2017-13831

Name of the Vulnerable Software and Affected Versions DocuWare Fulltext Search server versions through 6.11 Description The default installation of the server allows remote users to connect to and download searchable text from the embedded Solr service, bypassing access control features. An...

autodilyjimo.cz XSS vulnerability

Vulnerable URL: http://www.autodilyjimo.cz/produkty.php?fulltext=1Produkt"--!"submit=Vyhledat Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 593942 VIP website status:| No Check...

UBUNTU-CVE-2016-3486

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS...

CVE-2014-6564

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML...

Design/Logic Flaw

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML...

CVE-2014-6564

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML...

UBUNTU-CVE-2014-6564

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML...

CVE-2014-6564

Disclaimer: This data contains information about vulnerable...

CVE-2014-6564

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML...

CVE-2014-6564

CVE-2014-6564 affects Oracle MySQL Server 5.6.19 and earlier. Described as an unspecified vulnerability that allows remote authenticated users to affect availability via INNODB FULLTEXT SEARCH DML vectors. Connected sources confirm affected product/version and impact focus on availability; no exp...

CVE-2014-6564

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML...

CVE-2014-6564: Undefined Security Weakness

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML...

PT-2014-7294 · Oracle +2 · Mysql Server +2

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.6.19 and earlier Description: The issue affects the availability of the system, allowing remote authenticated users to exploit it via vectors related to SERVER:INNODB FULLTEXT SEARCH DML. Recommendations: For...

Tiki Wiki CMS Groupware vulnerable to SQL injection

Overview Tiki Wiki CMS Groupware Tiki is a content management system CMS. Tiki contains a SQL injection vulnerability. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary SQL...

DEBIAN-CVE-2010-4759

Open Ticket Request System OTRS before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service daemon hang via a fulltext search...

CVE-2010-4759

Open Ticket Request System OTRS before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service daemon hang via a fulltext search...

CVE-2010-4759

Open Ticket Request System OTRS before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service daemon hang via a fulltext search...

CVE-2010-4759

Open Ticket Request System OTRS before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service daemon hang via a fulltext search...

CVE-2010-4759

OTRS before 3.0.0-beta7 is affected by a DoS in fulltext ticket search due to improper restriction of ticket ages within a search scope. Impact: remote authenticated users can cause a daemon hang. Affected product/version details are documented across multiple sources (OTRS