Lucene search
K

35 matches found

Positive Technologies
Positive Technologies
added 2023/02/08 12:0 a.m.2 views

PT-2023-2144 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows versions 11.1 through 11.5 Description: The issue is related to insufficient input validation in the database management system, which can be exploited to cause a Denial of Service by executing a specially...

7.5CVSS7.3AI score0.00112EPSS
Exploits0References6
CNVD
CNVD
added 2021/03/09 12:0 a.m.8 views

Unspecified Vulnerability in Luxion KeyShot

Luxion KeyShot is a software for designing photos of 3D scenes from Luxion USA. The software enables a real-time 3D rendering workflow that displays results immediately and reduces the time required to create photorealistic product photos. A security vulnerability exists in the Luxion KeyShot...

7.8CVSS6.8AI score0.00342EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/02/04 12:0 a.m.4 views

Luxion KeyShot 安全漏洞

Luxion KeyShot is a software for designing photos of 3D scenes from Luxion USA. The software enables a real-time 3D rendering workflow that displays results immediately and reduces the time required to create photorealistic product photos. A security vulnerability exists in the Luxion KeyShot...

7.8CVSS7.1AI score0.00342EPSS
Exploits0References6
OSV
OSV
added 2020/05/12 6:15 p.m.1 views

CVE-2020-6248

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

7.2CVSS7.8AI score
Exploits0References2
Prion
Prion
added 2020/05/12 6:15 p.m.12 views

Code injection

SAP Adaptive Server Enterprise Backup Server, version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code execution or Code Injection...

6.5CVSS7.5AI score0.01439EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2020/05/12 5:50 p.m.58 views

CVE-2020-6248

CVE-2020-6248 affects SAP Adaptive Server Enterprise (Backup Server) 16.0. The issue arises because the server does not perform required validation for an authenticated user during DUMP/LOAD, enabling arbitrary code execution or code injection. Related sources describe potential database takeover...

9.1CVSS7.8AI score0.01439EPSS
Exploits0References2Affected Software1
Kitploit
Kitploit
added 2019/10/21 11:29 a.m.87 views

UAC-A-Mola - Tool That Allows Security Researchers To Investigate New UAC Bypasses, In Addition To Detecting And Exploiting Known Bypasses

UAC-A-Mola is a tool that allows security researchers to investigate new UAC bypasses, in addition to detecting and exploiting known bypasses. UAC-A-mola has modules to carry out the protection and mitigation of UAC bypasses. The strong point of uac-a-mola is that it was created so that other...

7.9AI score
Exploits0References1
CNVD
CNVD
added 2019/08/29 12:0 a.m.4 views

GNU Chess Stack Buffer Overflow Vulnerability

GNU Chess is a chess game program. A stack buffer overflow vulnerability exists in the cmdload function in frontend/cmd.cc in GNU Chess 6.2.5. An attacker can exploit this vulnerability to cause a stack buffer overflow via a specially crafted chess position in an EPD file...

7.8CVSS7.3AI score0.00305EPSS
Exploits1References1
CNVD
CNVD
added 2018/07/26 12:0 a.m.1 views

Cisco SD-WAN Solution Remote Command Injection Vulnerability (CNVD-2018-14074)

Cisco vBond Orchestrator Software and other products are from Cisco. cisco vBond Orchestrator Software is a set of security network extension management software. vEdge 100 Series Routers is a 100 series router product. SD-WAN Solution is a set of network extension solution running in it. A comma...

9CVSS7.5AI score0.00341EPSS
Exploits0References1
OSV
OSV
added 2018/07/18 11:29 p.m.2 views

CVE-2018-0348

A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to t...

7.2CVSS6AI score
Exploits0References2
NVD
NVD
added 2006/06/19 10:2 a.m.15 views

CVE-2006-3067

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

5CVSS7.2AI score0.01628EPSS
Exploits0References9
Cvelist
Cvelist
added 2006/06/19 10:0 a.m.19 views

CVE-2006-3067

Multiple unspecified vulnerabilities in IBM DB2 Universal Database UDB before 8.1 FixPak 12 allow remote attackers to cause a denial of service application crash via a 1 "long column list" in the a REPLACE INTO and b INSERT INTO portions of the LOAD command or a 2 large number of values in an IN...

7.2AI score0.01628EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2005/02/06 12:0 a.m.3 views

PT-2005-1308 · Postgresql +1 · Postgresql +1

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 7.2.x through 7.4.x PostgreSQL affected versions not specified Description: The issue allows local users to load arbitrary shared libraries and execute code via the LOAD extension. Any database user is permitted to load...

7.5CVSS6.5AI score0.23114EPSS
Exploits1References27
Positive Technologies
Positive Technologies
added 2003/10/08 12:0 a.m.4 views

PT-2003-1903 · Ibm · Ibm Db2 Universal Database

Name of the Vulnerable Software and Affected Versions: IBM DB2 Universal Data Base versions 7.2 before Fixpak 10 and 10a IBM DB2 Universal Data Base versions 8.1 before Fixpak 2 Description: A stack-based buffer overflow issue allows attackers with Connect privileges to execute arbitrary code via...

7.5CVSS7.7AI score0.01039EPSS
Exploits0References2
securityvulns
securityvulns
added 2003/10/03 12:0 a.m.46 views

ptl-2003-01: IBM DB2 LOAD Command Stack Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pentest Limited Security Advisory IBM DB2 LOAD Command Stack Overflow Vulnerability Advisory Details - ---------------- Title: IBM DB2 LOAD Command Stack Overflow Vulnerability Announcement date: 1st October 2003 Advisory Reference: ptl-2003-01 CVE...

7.5CVSS1.3AI score0.01039EPSS
Exploits0
Rows per page
Query Builder