1675 matches found
UBUNTU-CVE-2020-2875
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.14 and prior and 5.1.48 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL...
CVE-2020-2933
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 5.1.48 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...
CVE-2020-2933
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 5.1.48 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...
CVE-2020-2933
CVE-2020-2933 is a DoS vulnerability in Oracle MySQL Connector/J. Affected are MySQL Connector/J versions 5.1.48 and earlier. Debian/DSA and CNVD entries reference a fix path: upgrade to 5.1.49 (or later) to remediate. The public docs do not provide the exact root cause or exploitation details be...
CVE-2020-2933
Removed by vendor...
CVE-2020-2933
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 5.1.48 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...
CVE-2020-2934
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.19 and prior and 5.1.48 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL...
CVE-2020-2934
CVE-2020-2934 affects MySQL Connector/J (Oracle MySQL) with vulnerable Connector/J components in affected releases: 8.0.19 and earlier, and 5.1.48 and earlier. A remote attacker can exploit over multiple network protocols with unauthenticated access; however, successful exploitation requires user...
CVE-2020-2934
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.19 and prior and 5.1.48 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL...
CVE-2020-2875
CVE-2020-2875 affects MySQL Connector/J (Oracle MySQL Connectors). Affected are Connector/J and MySQL Connectors versions: 8.0.14 and earlier, and 5.1.48 and earlier. The vulnerability is network-facing across multiple protocols and can allow an unauthenticated attacker to perform unauthorized re...
CVE-2020-2875
Removed by vendor...
The vulnerability in the J-Web web interface of the JunOS operating system allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability in the J-Web web interface of the JunOS operating system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
An Unfixable Flaw Threatens 5 Years of Intel Chips
Plus: A J. Crew breach, CIA hacking, and more of the week's top security news...
j-navi.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1112700 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2014-6447
Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting XSS issues or crash the J-Web service DoS. This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 befor...
Cross site scripting
Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting XSS issues or crash the J-Web service DoS. This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 befor...
CVE-2014-6447
CVE-2014-6447 affects Juniper Networks Junos J-Web error handling, causing potential XSS or J-Web DoS. Affected Junos OS versions include: 12.1X44 (before 12.1X44-D45), 12.1X46 (before 12.1X46-D30), 12.1X47 (before 12.1X47-D20), 12.3 (before 12.3R8), 12.3X48 (before 12.3X48-D10), 13.1 (before 13....
CVE-2014-6447
Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting XSS issues or crash the J-Web service DoS. This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 befor...
CVE-2020-5182
The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...
Design/Logic Flaw
The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...