Lucene search
K

4 matches found

OSV
OSV
added 2022/03/07 11:3 a.m.1 views

OESA-2022-1557 cyrus-sasl security update

The package contains the Cyrus implementation of SASL. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. Security Fixes: In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for ...

8.8CVSS7.9AI score0.00431EPSS
Exploits0References2
OSV
OSV
added 2022/02/24 3:15 p.m.2 views

AZL-8794 CVE-2022-24407 affecting package cyrus-sasl for versions less than 2.1.28-1

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement...

8.8CVSS7.2AI score0.00431EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2021/09/23 12:0 a.m.197 views

Gurock Testrail 7.2.0.3014 Improper Access Control

Exploit Title: Gurock Testrail 7.2.0.3014 - 'files.md5' Improper Access Control Date: 22/09/2022 Exploit Author: Sick Codes & JohnJHacking Sakura Samuraii Vendor Homepage: https://www.gurock.com/testrail/ Version: 7.2.0.3014 and below Tested on: macOS, Linux, Windows CVE : CVE-2021-40875 Referenc...

0.4AI score0.83001EPSS
Exploits4
OpenVAS
OpenVAS
added 2021/06/15 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2021:1970-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.8AI score0.00641EPSS
Exploits0References2
Rows per page
Query Builder