Lucene search
+L

25608 matches found

Positive Technologies
Positive Technologies
added 2024/04/16 12:00 a.m.6 views

PT-2024-3444 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the InnoDB component, allows a high-privileged attacker with network acce...

6.5CVSS5.5AI score0.01107EPSS
SaveExploits0References120
Positive Technologies
Positive Technologies
added 2024/04/16 12:00 a.m.6 views

PT-2024-3448 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.36 and prior Oracle MySQL Server versions 8.3.0 and prior Description: The issue is related to the Server: Optimizer component of Oracle MySQL Server and is associated with inadequate access control. It allows...

6.5CVSS5.4AI score0.01107EPSS
SaveExploits0References120
Positive Technologies
Positive Technologies
added 2024/04/16 12:00 a.m.8 views

PT-2024-3722 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul, allowing an...

6.4CVSS6.5AI score0.00395EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/04/16 12:00 a.m.10 views

PT-2024-3726

Name of the Vulnerable Software and Affected Versions: Oracle Java SE versions 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22 Oracle GraalVM for JDK versions 17.0.10, 21.0.2, 22 Oracle GraalVM Enterprise Edition versions 20.3.13, 21.3.9 Description: The issue is related to a difficult to exploit...

3.7CVSS6.8AI score0.01372EPSS
SaveExploits0References359
Positive Technologies
Positive Technologies
added 2024/04/16 12:00 a.m.9 views

PT-2024-4881

Name of the Vulnerable Software and Affected Versions: Oracle Java SE versions 8u401, 8u401-perf, 11.0.22 Oracle GraalVM Enterprise Edition versions 20.3.13, 21.3.9 Description: The issue is related to insufficient input validation in the Concurrency component of Oracle Java SE and Oracle GraalVM...

3.7CVSS6.8AI score0.01286EPSS
SaveExploits0References323
Positive Technologies
Positive Technologies
added 2024/04/16 12:00 a.m.29 views

PT-2024-3730 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.34 and prior MySQL Server versions 8.3.0 and prior Description: The vulnerability in the MySQL Server product of Oracle MySQL is related to insufficient input validation in the Server: DML component. This issue can b...

7.5CVSS5.1AI score0.01107EPSS
SaveExploits0References106
Positive Technologies
Positive Technologies
added 2024/04/16 12:00 a.m.13 views

PT-2024-4882 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient input validation in the LOV component of Oracle Complex Maintenance, Repair, and Overhaul, allowing an...

6.4CVSS6.5AI score0.00395EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/04/16 12:00 a.m.3 views

PT-2024-4349 · Oracle +1 · Oracle Graalvm For Jdk +2

Name of the Vulnerable Software and Affected Versions: Oracle GraalVM for JDK versions 17.0.10, 21.0.2, 22 Oracle GraalVM Enterprise Edition versions 20.3.13, 21.3.9 Description: The issue is related to a vulnerability in the Compiler component of Oracle GraalVM for JDK and Oracle GraalVM...

3.7CVSS7AI score0.00564EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2024/04/16 12:00 a.m.12 views

PT-2024-3719 · Oracle · Oracle Database Sharding +2

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.22 Oracle Database Server versions 21.3 through 21.13 Description: The issue is related to insufficient input validation in the Oracle Database Sharding component. It allows a high-privileged...

4CVSS6.5AI score0.00532EPSS
SaveExploits0References9
CNVD
CNVD
added 2024/04/11 12:00 a.m.8 views

Zoom Desktop Client for Linux Cross-Site Scripting Vulnerability

Zoom Desktop Client for Linux is a client application designed for virtualized desktop environments such as Windows 365 Cloud PC. A cross-site scripting vulnerability exists in Zoom Desktop Client for Linux, which stems from the application's lack of effective filtering and escaping of...

6.8CVSS6.1AI score0.00462EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/09 6:15 p.m.13 views

CVE-2024-27242

Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access...

6.8CVSS5.6AI score0.00462EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/09 6:15 p.m.21 views

CVE-2024-27242

Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access...

6.8CVSS4.4AI score0.00462EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/09 5:18 p.m.14 views

CVE-2024-27242 Zoom Desktop Client for Linux - Cross Site Scripting

Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access...

4.1CVSS6.4AI score0.00462EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/09 5:18 p.m.30 views

CVE-2024-27242 Zoom Desktop Client for Linux - Cross Site Scripting

Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service via network access...

4.1CVSS4.8AI score0.00462EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/09 12:00 a.m.10 views

Zoom Client 安全漏洞

Zoom Desktop Client for Linux is a client application designed for virtualized desktop environments such as Windows 365 Cloud PC. A cross-site scripting vulnerability exists in Zoom Desktop Client for Linux, which stems from the application's lack of effective filtering and escaping of...

6.8CVSS6AI score0.00462EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/09 12:00 a.m.14 views

PT-2024-21772 · Zoom · Zoom Desktop Client For Linux

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Linux versions prior to 5.17.10 Description: The issue allows an authenticated user to conduct a denial of service via network access. This is due to cross-site scripting in the Zoom Desktop Client for Linux...

6.8CVSS6AI score0.00462EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/04/09 12:00 a.m.10 views

PT-2024-7807 · Milestone Systems · Xprotect Device Pack

Name of the Vulnerable Software and Affected Versions: Siveillance Video formerly Siveillance VMS versions affected versions not specified XProtect Device Pack versions affected versions not specified Description: The issue is related to a buffer overflow vulnerability due to the lack of size...

7.3CVSS8.5AI score0.00225EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2024/04/08 12:00 a.m.53 views

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.7.1.7)

The version of AOS installed on the remote host is prior to 6.7.1.7. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.7.1.7 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE...

7.5CVSS6.6AI score0.01035EPSS
SaveExploits0References8
NVD
NVD
added 2024/04/06 12:15 p.m.27 views

CVE-2024-25029

IBM Personal Communications 14.0.6 through 15.0.1 includes a Windows service that is vulnerable to remote code execution RCE and local privilege escalation LPE. The vulnerability allows any unprivileged user with network access to a target computer to run commands with full privileges in the...

10CVSS9.3AI score0.00787EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/06 12:15 p.m.12 views

CVE-2024-25029

IBM Personal Communications 14.0.6 through 15.0.1 includes a Windows service that is vulnerable to remote code execution RCE and local privilege escalation LPE. The vulnerability allows any unprivileged user with network access to a target computer to run commands with full privileges in the...

10CVSS6.5AI score0.00787EPSS
SaveExploits0References2
Rows per page
Query Builder