Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauthoperation.php that doesn't require authentication, an...

j-funding.de Improper Access Control vulnerability OBB-3773622

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

w-j-schmidt-moebeldesign.de Improper Access Control vulnerability OBB-3772929

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the J-Web interface in Juniper Networks Junos OS allows a hacker to execute arbitrary code.

The vulnerability of the J-Web interface in Juniper Networks Junos OS systems is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Connectors attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

...

ai.koog:agents-features-sql-jvm (>=0.4.2 <=0.5.4), app.cash.backfila:client-misk-hibernate (>=2023.12.01.210510-f61f157 <=2024.06.21.153703-27e31a9) +1222 more potentially affected by CVE-2023-22102 via com.mysql:mysql-connector-j (>=8.0.31 <=8.1.0)

com.mysql:mysql-connector-j MAVEN version =8.0.31, =0.4.2, =2023.12.01.210510-f61f157, =2023.12.01.210510-f61f157, =2023.12.01.210510-f61f157, =2.0.0, =6.6.0, =6.6.0, =2.5.0, =1.5.12, =1.6.8.1, =1.6.9.1, =1.6.8.1, =1.1.0, =1.1.2 and more Source cves: CVE-2023-22102 Source advisory:...

MySQL Connectors takeover vulnerability

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

GHSA-M6VM-37G8-GQVH MySQL Connectors takeover vulnerability

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

CVE-2023-22102

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

AZL-31573 CVE-2023-22102 affecting package mysql for versions less than 8.0.34-1

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

CVE-2023-22102

CVE-2023-22102 is described as a vulnerable condition in Oracle MySQL’s Connector/J (affected versions 8.1.0 and earlier). The CVE text states that an unauthenticated attacker with network access via multiple protocols can compromise MySQL Connectors, with user interaction required, and that atta...

PT-2023-6380

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 8.1.0 and prior Description The issue is related to insufficient input validation in the Connector/J component of MySQL Connectors, allowing an unauthenticated attacker with network access via multiple protocols to...

j-holistic.org Cross Site Scripting vulnerability OBB-3746176

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wallacejnichols.org Cross Site Scripting vulnerability OBB-3744161

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-32124

Cross-Site Request Forgery CSRF vulnerability in Arul Prasad J Publish Confirm Message plugin = 1.3.1 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Arul Prasad J Publish Confirm Message plugin = 1.3.1 versions...

CVE-2023-32124 WordPress Publish Confirm Message Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Arul Prasad J Publish Confirm Message plugin = 1.3.1 versions...

CVE-2023-32124

The CVE-2023-32124 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Publish Confirm Message (author: Arul Prasad J) affecting versions

log4j1-socketappender: DoS via hashmap logging

A flaw was found in Chainsaw and SocketAppender components with Log4j 1.x on JRE, less than 1.7. This issue may allow an attacker to use a logging entry with a specially-crafted hashmap or hashtable, depending on which logging component is in use, to process and exhaust the available memory in th...

j-izvestia.ru Cross Site Scripting vulnerability OBB-3722450

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...