Lucene search
K

74 matches found

Cvelist
Cvelist
added 2026/05/21 5:11 p.m.30 views

CVE-2026-48242 Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php

Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials host, username, password, database name in importmdb.php. The credentials are embedded in source code committed to the public repository, allowing any reader of the source to obtain valid configuration values...

9.2CVSS0.00052EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/21 5:11 p.m.4 views

CVE-2026-48242

Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials host, username, password, database name in importmdb.php. The credentials are embedded in source code committed to the public repository, allowing any reader of the source to obtain valid configuration values...

9.2CVSS5.9AI score0.00052EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/21 5:11 p.m.8 views

EUVD-2026-31324

Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials host, username, password, database name in importmdb.php. The credentials are embedded in source code committed to the public repository, allowing any reader of the source to obtain valid configuration values...

9.2CVSS5.9AI score0.00052EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/21 12:0 a.m.5 views

tickets 信任管理问题漏洞

Tickets is an open-source public safety scheduling and tracking application developed by Open ISES. Versions of tickets prior to 3.44.2 contained a vulnerability related to trust management. This vulnerability stemmed from hardcoding MySQL database connection credentials in the importmdb.php file...

9.2CVSS5.9AI score0.00052EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2019-16228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size...

7.5CVSS7.1AI score0.00247EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/21 8:40 p.m.6 views

CVE-2008-1200

Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine msjet40.dll. NOTE: this is probably a different issue than CVE-2007-6026...

9.3CVSS7.7AI score0.80821EPSS
Exploits6References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/23 12:0 a.m.40 views

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS3.7AI score0.26662EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/15 12:0 a.m.30 views

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS3.7AI score0.33401EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/15 12:0 a.m.25 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7.8CVSS4AI score0.40161EPSS
Exploits0References1
OSV
OSV
added 2019/09/11 3:15 p.m.0 views

UBUNTU-CVE-2019-16228

An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size field. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

7.5CVSS5.8AI score0.00247EPSS
Exploits1References3
Zero Day Initiative
Zero Day Initiative
added 2019/09/10 12:0 a.m.42 views

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS3.7AI score0.35463EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/10 12:0 a.m.22 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS4AI score0.29382EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/10 12:0 a.m.20 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS4AI score0.35463EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/09/10 12:0 a.m.24 views

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS3.7AI score0.35463EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/08/13 12:0 a.m.26 views

Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET database...

7CVSS4AI score0.09677EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/06/11 12:0 a.m.36 views

Microsoft Windows Jet Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.5AI score0.07323EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.25 views

Microsoft Windows Jet Database Engine Sign Extension Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.7AI score0.24224EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.22 views

Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.5AI score0.24224EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.26 views

Microsoft Windows JET Database Engine Buffer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.8AI score0.19206EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.23 views

Microsoft Windows Jet Database Engine Sign Extension Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the JET databa...

7CVSS3.7AI score0.24224EPSS
Exploits0References1
Rows per page
Query Builder