1895 matches found
EulerOS 2.0 SP5 : mysql-connector-java (EulerOS-SA-2021-1215)
According to the version of the mysql-connector-java package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - MySQL Connector/J is a native Java driver that converts JDBC Java Database Connectivity calls into the network protocol used by the...
Huawei EulerOS: Security Advisory for postgresql-jdbc (EulerOS-SA-2021-1165)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : postgresql-jdbc (EulerOS-SA-2021-1113)
According to the version of the postgresql-jdbc package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE.CVE-2020-13692 Note that Tenable Network Security has extracted the preceding...
Huawei EulerOS: Security Advisory for postgresql-jdbc (EulerOS-SA-2021-1113)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Security Advisory: Red Hat Integration Tech-Preview 2 Camel K security update
An update to the Camel K operator image for Red Hat Integration tech-preview is now available. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
Apache DolphinScheduler 安全漏洞
Apache DolphinScheduler is a distributed decentralized , easily scalable visual DAG workflow task scheduling system . Committed to solving the intricate dependencies in the data processing process , so that the scheduling system in the data processing process out of the box . Apache...
Security Bulletin: PostgresSQL JDBC Driver as used in IBM QRadar SIEM is vulnerable to information disclosure (CVE-2020-13692)
Summary PostgresSQL JDBC Driver as used in IBM QRadar SIEM is vulnerable to information disclosure caused by an XML external entity XXE Vulnerability Details CVEID: CVE-2020-13692 DESCRIPTION: PostgreSQL JDBC Driver could allow a remote authenticated attacker to obtain sensitive information, caus...
SUSE-SU-2020:3466-1 Security update for SUSE Manager Server 4.0
This update fixes the following issues: bind-formula: - Temporarily disable dnssec-validation as hotfix for bsc1177790 - Update to version 0.1.1603299886.60e4bcf grafana-formula: - Use variable for product name - Add support for system groups in Client Systems dashboard postgresql-jdbc: - Address...
Apache DolphinScheduler Remote Code Execution Vulnerability
Apache DolphinScheduler is a distributed decentralized , easily scalable visual DAG workflow task scheduling system . Committed to solving the intricate dependencies in the data processing process , so that the scheduling system in the data processing process out of the box . Apache...
Security Bulletin: Security vulnerabilities have been fixed in the IBM Security Access Manager and IBM Security Verify Access products
Summary Fixes for security vulnerabilities identified in IBM Security Access Manager and IBM Security Verify Access are available. Vulnerability Details CVEID: CVE-2020-11868 DESCRIPTION: NTP is vulnerable to a denial of service, caused by a flaw in ntpd. By sending a server mode packet with a...
Fedora: Security Advisory for mysql-connector-java (FEDORA-2020-35995bb2d3)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 33 Update: mysql-connector-java-8.0.21-1.fc33
MySQL Connector/J is a native Java driver that converts JDBC Java Database Connectivity calls into the network protocol used by the MySQL database. It lets developers working with the Java programming language easily build programs and applets that interact with MySQL and connect all corporate...
Remote Code Execution (RCE)
dolphinscheduler-dao is vulnerable to remote code execution. Using MySQL database with connectorj, an attacker can inject a malicious code in the DolphinScheduler server through jdbc connect parameters input "detectCustomCollations":true,"autoDeserialize":true...
Important: Red Hat Security Advisory: Red Hat Decision Manager 7.8.1 Security Update
An update is now available for Red Hat Decision Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...
[SECURITY] Fedora 32 Update: mysql-connector-java-8.0.21-1.fc32
MySQL Connector/J is a native Java driver that converts JDBC Java Database Connectivity calls into the network protocol used by the MySQL database. It lets developers working with the Java programming language easily build programs and applets that interact with MySQL and connect all corporate...
Amazon Linux 2 : postgresql-jdbc (ALAS-2020-1482)
The version of postgresql-jdbc installed on the remote host is prior to 9.2.1002-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1482 advisory. PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. A flaw was found in PostgreSQL JDBC in versions prior to...
Important: postgresql-jdbc
Issue Overview: PostgreSQL JDBC Driver aka PgJDBC before 42.2.13 allows XXE. A flaw was found in PostgreSQL JDBC in versions prior to 42.2.13. An XML External Entity XXE weakness was found in PostgreSQL JDBC. The highest threat from this vulnerability is to data confidentiality and system...
Remote Code Execution (RCE)
ojdbc7 is vulnerable to remote code execution RCE. The vulnerability exists in the JDBC component of the Oracle Database Server...
