Lucene search
K

22 matches found

RedhatCVE
RedhatCVE
added 2026/02/09 12:3 p.m.13 views

CVE-2026-1966

A flaw was found in YugabyteDB Anywhere. This vulnerability allows an authenticated user with access to the configuration view to obtain Lightweight Directory Access Protocol LDAP bind passwords. These passwords are displayed in cleartext within the web user interface UI when configured via gflag...

6.5CVSS5.1AI score0.00163EPSS
Exploits0References4
NVD
NVD
added 2026/02/05 12:16 p.m.5 views

CVE-2026-1966

YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration view could obtain LDAP credentials, potentially enabling unauthorized access to external directory services...

2.4CVSS0.00163EPSS
Exploits0References1
CVE
CVE
added 2026/02/05 11:38 a.m.10 views

CVE-2026-1966

CVE-2026-1966 affects YugabyteDB Anywhere. An authenticated user with access to the configuration view can see LDAP bind passwords configured via gflags in cleartext in the web UI, enabling potential unauthorized access to external directory services. The issue is described consistently across so...

2.4CVSS5.4AI score0.00163EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/05 11:38 a.m.27 views

CVE-2026-1966 YugabyteDB Anywhere Exposes LDAP Credentials in Cleartext in Web UI

YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration view could obtain LDAP credentials, potentially enabling unauthorized access to external directory services...

2.4CVSS0.00163EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-24146

Malicious code in bioql PyPI...

7CVSS6.6AI score0.00318EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/10/17 12:0 a.m.20 views

SUSE SLED12 / SLES12 Security Update : javapackages-tools, javassist, mysql-connector-java, protobuf, python-python-gflags (SUSE-SU-2021:3450-1)

The remote SUSE Linux SLED12 / SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3450-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 703...

5.6AI score
Exploits0References4
Rockylinux
Rockylinux
added 2020/07/29 7:15 a.m.11 views

Rocky Enterprise Software Foundation OpenStack Platform 16.1 bug fix and enhancement advisory

An update is available for python-gflags, python-oauth2client, google-api-python-client, python-httplib2, python-uritemplate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

0.7AI score
Exploits0
OSV
OSV
added 2017/03/14 9:59 a.m.2 views

CVE-2017-6883

The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF image. The vulnerability could lead to information...

4.7CVSS5.5AI score0.03378EPSS
Exploits0References3
OSV
OSV
added 2017/01/23 7:59 a.m.3 views

CVE-2017-5556

The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG image. The vulnerability could lead to information disclosure; ...

8.1CVSS5.5AI score0.03739EPSS
Exploits0References3
n0where
n0where
added 2016/11/02 5:23 p.m.17 views

High Throughput Fuzzer: Grr

High Throughput Fuzzer GRR is an x86 to amd64 binary translator. GRR was created to emulate and fuzzer DECREE challenge binaries. GRR was created for the DARPA Cyber Grand Challenge. Features Code cache persistence avoids translation overheads across separate runs. Optimization of the code cache,...

1.5AI score
Exploits0References6
CNVD
CNVD
added 2016/11/01 12:0 a.m.3 views

Foxit Reader and PhantomPDF Read-Over-Boundary Vulnerability (CNVD-2016-10513)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. An out-of-bounds read vulnerability exists in Foxit Reader and PhantomPDF versions prior to 8.1 on Windows-based platforms. When the gflags application is enabled, a remote...

7.5CVSS7.7AI score0.02187EPSS
Exploits0References1
CNVD
CNVD
added 2016/11/01 12:0 a.m.2 views

Foxit Reader and PhantomPDF Read-Over-Boundary Vulnerability (CNVD-2016-10512)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. An out-of-bounds read vulnerability exists in Foxit Reader and PhantomPDF versions prior to 8.1 on Windows-based platforms. When the gflags application is enabled, a remote...

8.8CVSS7.7AI score0.0259EPSS
Exploits0References1
CNVD
CNVD
added 2016/11/01 12:0 a.m.3 views

Foxit Reader and PhantomPDF Denial of Service Vulnerability (CNVD-2016-10514)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A denial of service vulnerability exists in the ConvertToPDF plug-in in Foxit Reader and PhantomPDF versions prior to 8.1 on Windows-based platforms. When the gflags application...

5.3CVSS6.7AI score0.01093EPSS
Exploits0References1
OSV
OSV
added 2016/10/31 10:59 a.m.2 views

CVE-2016-8878

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document, aka "Data from Faulting Address may be used as a return...

8.8CVSS6.1AI score0.0259EPSS
Exploits0References2
OSV
OSV
added 2016/10/31 10:59 a.m.3 views

CVE-2016-8876

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF image embedded in the XFA stream in a PDF document, aka "Read Access Violation starting at FoxitReader."...

7.5CVSS6.1AI score0.02187EPSS
Exploits0References2
NVD
NVD
added 2016/10/31 10:59 a.m.16 views

CVE-2016-8876

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF image embedded in the XFA stream in a PDF document, aka "Read Access Violation starting at FoxitReader."...

7.5CVSS7.7AI score0.02187EPSS
Exploits0References2
OSV
OSV
added 2016/10/31 10:59 a.m.2 views

CVE-2016-8875

The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF image, aka "Data from Faulting Address is used as one or more arguments in...

5.3CVSS5.8AI score0.01093EPSS
Exploits0References2
Cvelist
Cvelist
added 2016/10/31 10:0 a.m.26 views

CVE-2016-8878

Out-of-Bounds read vulnerability in Foxit Reader and PhantomPDF before 8.1 on Windows, when the gflags app is enabled, allows remote attackers to execute arbitrary code via a crafted BMP image embedded in the XFA stream in a PDF document, aka "Data from Faulting Address may be used as a return...

8.8AI score0.0259EPSS
Exploits0References2
myhack58
myhack58
added 2016/08/10 12:0 a.m.1049 views

UAF vulnerability description-vulnerability warning-the black bar safety net

UAF Use After Freevulnerability is a memory corruption vulnerability,usually present in the browser. Recently,the browser's new version Added a series of controls,which also makes use of these vulnerabilities becomes more difficult. Nevertheless,they still seem to exist. This article mainly will ...

7.3AI score0.46767EPSS
Exploits1
OSV
OSV
added 2016/04/22 3:59 p.m.4 views

CVE-2016-4065

The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted 1 JPEG, 2 GIF, or 3 BMP image...

7.8CVSS5.8AI score
Exploits0References4
Rows per page
Query Builder