CVE-2008-3958: Undefined Security Weakness

IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service instance crash via a crafted CONNECT/ATTACH data stream that simulates a V7 client connect/attach request. NOTE: this may overlap CVE-2008-3858. NOTE: this issue exists because of an incomplete fix for CVE-2008-39...

CVE-2008-3959: Undefined Security Weakness

IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service instance crash via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request...

Cross site request forgery (csrf)

The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service instance crash via a crafted CONNECT data stream that simulates a V7 client connect request...

CVE-2008-3858

The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service instance crash via a crafted CONNECT data stream that simulates a V7 client connect request...

CVE-2008-3858: Undefined Security Weakness

The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to cause a denial of service instance crash via a crafted CONNECT data stream that simulates a V7 client connect request...

CVE-2008-2590

Unspecified vulnerability in the Instance Management component in Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 has unknown impact and remote authenticated attack vectors...

CVE-2008-2590

Unspecified vulnerability in the Instance Management component in Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 has unknown impact and remote authenticated attack vectors...

CVE-2008-2590: Undefined Security Weakness

Unspecified vulnerability in the Instance Management component in Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 has unknown impact and remote authenticated attack vectors...

CVE-2008-2908

creationtimestamp| type| source ---|---|--- 2008-06-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16508 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/novelliprintgetdriversettings.rb 2025-02-06...

Ruby XMLRPC Arbitrary Command Execution Vulnerability

Overview utils.rb in The Ruby XMLRPC server sets an insecure default value for the publicinstancemethods function, which could cause the highly privileged function to be exposed. Impact An attacker could execute arbitrary command on the system running Ruby XMLRPC. Solution Please refer to the...

CVE-2007-6081

AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000...

CVE-2007-5652: Improper Restriction of Operations within the Bounds of a Memory Buffer

IBM DB2 UDB 9.1 before Fixpak 4 does not properly manage storage of a list containing authentication information, which might allow attackers to cause a denial of service instance crash or trigger memory corruption. NOTE: the vendor description of this issue is too vague to be certain that it is...

CVE-2007-0080

Buffer overflow in the SMBConnectServer function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost field of an SMBHandleType instance. NOTE: the impact of this issue has been disputed by a reliable third party and the vendor, who states that...

SQL injection - moodle

// http://www.w4cking.com Product: moodle 1.6.2 http://www.moodle.org Vulnerability: SQL injection Notes: - SQL injection can be used to obtain password hash - the moodle blog "module" must be enabled - guest access to the blog must be enabled POC:...

CVE-2006-4936: Improper Input Validation

Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors...

CVE-2006-3486

Off-by-one buffer overflow in the Instanceoptions::completeinitialization function in instanceoptions.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service application crash via unspecified vectors, which triggers the overflow...

CVE-2006-3486

Off-by-one buffer overflow in the Instanceoptions::completeinitialization function in instanceoptions.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service application crash via unspecified vectors, which triggers the overflow...

CVE-2006-3486

Off-by-one buffer overflow in the Instanceoptions::completeinitialization function in instanceoptions.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service application crash via unspecified vectors, which triggers the overflow...

CVE-2006-3486

CVE-2006-3486 affects MySQL servers prior to 5.0.23 and 5.1 prior to 5.1.12. It is an off-by-one buffer overflow in Instance_options::complete_initialization (instance_options.cc) that could let local users cause a denial of service (application crash) via vectors tied to convert_dirname. The ven...

PT-2006-4361 · Oracle · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL versions prior to 5.0.23 MySQL versions prior to 5.1.12 Description: The issue is related to an off-by-one buffer overflow in the Instance options::complete initialization function in instance options.cc in the Instance Manager. This...