BIT-2021-2144

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Parser. Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

BIT-2021-2372

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Rocky Linux 8 : java-17-openjdk (RLSA-2022:7000)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7000 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions that are affected...

Rocky Linux 8 : mysql:8.0 (RLSA-2020:3732)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:3732 advisory. mysql: Server: Security: Privileges multiple unspecified vulnerabilities CVE-2020-14663, CVE-2020-14678, CVE-2020-14697, CVE-2020-2761, CVE-2020-2774,...

FreeBSD : opengrok -- Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise OpenGrok. (1135e939-62b4-11ec-b8e2-1c1b0d9ea7e6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1135e939-62b4-11ec-b8e2-1c1b0d9ea7e6 advisory. - Vulnerability in OpenGrok component: Web App. Versions that are affected are 1.6.7 and prior. Easily...

Rocky Linux 9 : java-1.8.0-openjdk (RLSA-2023:0210)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0210 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are...

Rocky Linux 8 : redis:5 (RLSA-2021:3918)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:3918 advisory. - Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the...

Rocky Linux 8 : mariadb:10.3 (RLSA-2019:3708)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:3708 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.24 and prior and 8.0.13...

Rocky Linux 8 : java-17-openjdk (RLSA-2023:0192)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0192 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected...

Rocky Linux 8 : java-17-openjdk (RLSA-2022:1445)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1445 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected...

Exploit for Deserialization of Untrusted Data in Apache Activemq

CVE-2023-46604 This repository contains an exploit script and...

Apache ActiveMQ vulnerability used in ransomware attacks

On the 27 October, the Apache Software Foundation ASF announced a very serious vulnerability in Apache ActiveMQ that can be used to achieve remote code execution RCE. The Cybersecurity and Infrastructure Security Agency has now added this vulnerability to its Known Exploited Vulnerabilities...

PT-2023-9130 · Qumagie · Qumagie

Name of the Vulnerable Software and Affected Versions: QuMagie versions prior to 2.2.1 Description: A SQL injection issue has been reported, potentially allowing authenticated users to inject malicious code via a network. This could be exploited by a remote attacker to execute arbitrary code. The...

QNAP Systems QTS and QuTS hero code issue vulnerability

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems, Inc.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A code issue vulnerability exists in QNAP Systems QTS and QuTS her...

Oracle Linux 9 : java-1.8.0-openjdk (ELSA-2023-5733)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5733 advisory. - OpenJDK: segmentation fault in ciMethodBlocks CVE-2022-40433 - OpenJDK: IOR deserialization issue in CORBA 8303384 CVE-2023-22067 - OpenJDK:...

Zoom Client for Meetings < 5.14.7 Vulnerability (ZSB-23032)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.7. It is, therefore, affected by a vulnerability as referenced in the ZSB-23032 advisory. - Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable ...

Zoom Client for Meetings < 5.14.5 Vulnerability (ZSB-23027)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23027 advisory. - Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an...

Zoom Client for Meetings < 5.14.10 Vulnerability (ZSB-23034)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-23034 advisory. - Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable...

Zoom VDI Meeting Client < 5.14.0 Vulnerability (ZSB-23013)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23013 advisory. - Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow ...

Zoom Client for Meetings < 5.15.0 Vulnerability (ZSB-23018)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.15.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23018 advisory. - Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user t...