Lucene search
+L

71 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/25 12:00 a.m.•4 views

CVE-2014-3665: Undefined Security Weakness

Jenkins before 1.587 and LTS before 1.580.1 do not properly ensure trust separation between a master and slaves, which might allow remote attackers to execute arbitrary code on the master by leveraging access to the slave...

6.8CVSS6.6AI score0.02502EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2014/10/14 1:01 p.m.•10 views

jenkins: remote code execution from slaves (SECURITY-144)

Jenkins before 1.587 and LTS before 1.580.1 do not properly ensure trust separation between a master and slaves, which might allow remote attackers to execute arbitrary code on the master by leveraging access to the slave...

6.8CVSS6.2AI score0.02502EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2012/08/17 12:55 a.m.•7 views

CVE-2009-5026

The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments...

6.8CVSS6.3AI score0.07757EPSS
SaveExploits2References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/08/17 12:00 a.m.•2 views

CVE-2009-5026: Improper Neutralization of Special Elements used in an SQL Command

The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments...

6.8CVSS6.4AI score0.07757EPSS
SaveExploits2References2
myhack58
myhack58
•added 2012/02/15 12:00 a.m.•43 views

mysql injecting sleep statements caused denial of service and repair programme-vulnerability warning-the black bar safety net

mysql the presence of injection, and injecting sleep statements if you pass in a large enough parameter, for example: sleep9 9 9 9 9 9 9 9 9 9. If the database is using the myisam engine, and the injection point is a will lock TABLE statement, insert,replace,update,delete, then the entire data...

0.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2011/04/01 12:00 a.m.•39 views

Mandriva Update for openldap MDVSA-2011:055 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2011:055 openldap Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

5CVSS0.1AI score0.14474EPSS
SaveExploits2References2
securityvulns
securityvulns
•added 2011/03/31 12:00 a.m.•85 views

[ MDVSA-2011:055 ] openldap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:055 http://www.mandriva.com/security/ Package : openldap Date : March 30, 2011 Affected: 2009.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been identified and fixed in openldap:...

5CVSS9.5AI score0.14474EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2011/03/31 12:00 a.m.•42 views

Mandriva Linux Security Advisory : openldap (MDVSA-2011:055)

Multiple vulnerabilities has been identified and fixed in openldap : chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass...

5CVSS5.5AI score0.14474EPSS
SaveExploits2References2
OSV
OSV
•added 2011/03/20 2:00 a.m.•14 views

CVE-2011-1024

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

6.4AI score
SaveExploits0References21
Cvelist
Cvelist
•added 2011/03/20 1:00 a.m.•48 views

CVE-2011-1024

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

9.2AI score0.02593EPSS
SaveExploits0References21
UbuntuCve
UbuntuCve
•added 2011/03/19 12:00 a.m.•33 views

CVE-2011-1024

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

4.6CVSS5.9AI score0.02593EPSS
SaveExploits0References3
Rows per page
Query Builder