Lucene search
K

5550 matches found

RustSec
RustSec
added 2021/07/30 12:0 p.m.18 views

Partial read is incorrect in molecule

Anyone who uses totalsize.. function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release...

9.8CVSS2.6AI score0.01318EPSS
Exploits0Affected Software1
OSV
OSV
added 2021/07/30 12:0 p.m.4 views

RUSTSEC-2021-0103 Partial read is incorrect in molecule

Anyone who uses totalsize.. function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release...

9.8CVSS5.8AI score0.01318EPSS
Exploits0References3
Microsoft CVE
Microsoft CVE
added 2021/07/30 7:0 a.m.3 views

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138 prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).

...

3.3CVSS4.8AI score0.00604EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2021/07/23 7:0 a.m.3 views

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

...

4CVSS6.8AI score0.02312EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2021/07/23 12:0 a.m.6 views

PT-2021-6426 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.34 and prior Oracle MySQL Cluster versions 7.5.24 and prior Oracle MySQL Cluster versions 7.6.20 and prior Oracle MySQL Cluster versions 8.0.27 and prior Description: The issue allows a high-privileged attack...

10CVSS6.3AI score0.87816EPSS
Exploits22References425
Positive Technologies
Positive Technologies
added 2021/07/23 12:0 a.m.6 views

PT-2021-6424 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue allows a high-privileged attacker with access to the physic...

10CVSS6.7AI score0.87816EPSS
Exploits22References424
Positive Technologies
Positive Technologies
added 2021/07/23 12:0 a.m.5 views

PT-2021-6430 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue allows a high-privileged attacker with access to the physic...

10CVSS6.3AI score0.87816EPSS
Exploits22References425
Positive Technologies
Positive Technologies
added 2021/07/23 12:0 a.m.7 views

PT-2021-6421 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.34 and prior Oracle MySQL Cluster versions 7.5.24 and prior Oracle MySQL Cluster versions 7.6.20 and prior Oracle MySQL Cluster versions 8.0.27 and prior Description: The issue is related to insufficient...

10CVSS6.2AI score0.87816EPSS
Exploits22References423
Positive Technologies
Positive Technologies
added 2021/07/23 12:0 a.m.5 views

PT-2021-6427 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue is related to a buffer read overflow in the memory when...

10CVSS7AI score0.87816EPSS
Exploits22References424
Positive Technologies
Positive Technologies
added 2021/07/23 12:0 a.m.6 views

PT-2021-6423 · Mysql Server +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue allows a high-privileged attacker with access to the physical communication segment attached to the...

10CVSS6.3AI score0.87816EPSS
Exploits22References425
OSV
OSV
added 2021/07/21 3:16 p.m.3 views

CVE-2021-2438

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM...

4.3CVSS6.6AI score
Exploits0References1
OSV
OSV
added 2021/07/21 3:16 p.m.2 views

CVE-2021-2432

Vulnerability in the Java SE product of Oracle Java SE component: JNDI. The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

3.7CVSS6.7AI score0.03701EPSS
Exploits0References5
NVD
NVD
added 2021/07/21 3:16 p.m.16 views

CVE-2021-2432

Vulnerability in the Java SE product of Oracle Java SE component: JNDI. The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

4.3CVSS0.03701EPSS
Exploits0References5
Prion
Prion
added 2021/07/21 3:16 p.m.19 views

Design/Logic Flaw

Vulnerability in the Java SE product of Oracle Java SE component: JNDI. The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

4.3CVSS4.3AI score0.03701EPSS
Exploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2021/07/21 3:16 p.m.26 views

CVE-2021-2432

Vulnerability in the Java SE product of Oracle Java SE component: JNDI. The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

4.3CVSS6.8AI score0.03701EPSS
Exploits0References2
OSV
OSV
added 2021/07/21 3:15 p.m.2 views

CVE-2021-2411

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: JS module. Supported versions that are affected are 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successfu...

3.7CVSS6.5AI score0.01659EPSS
Exploits0References2
NVD
NVD
added 2021/07/21 3:15 p.m.17 views

CVE-2021-2411

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: JS module. Supported versions that are affected are 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successfu...

4.3CVSS0.01659EPSS
Exploits0References2
NVD
NVD
added 2021/07/21 3:15 p.m.17 views

CVE-2021-2340

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Memcached. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4CVSS0.02312EPSS
Exploits0References4
OSV
OSV
added 2021/07/21 3:15 p.m.4 views

AZL-6694 CVE-2021-2340 affecting package mysql for versions less than 8.0.28-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Memcached. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

2.7CVSS6.5AI score0.02312EPSS
Exploits0References1
OSV
OSV
added 2021/07/21 3:15 p.m.1 views

CVE-2020-21932

A vulnerability in /Login.html of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to bypass login and obtain a partially authorized token and uid...

5.3CVSS5.8AI score0.01299EPSS
Exploits1References2
Rows per page
Query Builder