Lucene search
K

526 matches found

RedHat Linux
RedHat Linux
added 2020/12/22 9:25 a.m.2 views

mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Pluggable Auth. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

4.9CVSS6.8AI score0.03919EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2020/12/12 12:0 a.m.13 views

Fedora: Security Advisory for pam (FEDORA-2020-bd83344365)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS9.6AI score0.01959EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2020/11/30 1:47 p.m.3 views

mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Pluggable Auth. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

4.9CVSS6.8AI score0.03919EPSS
Exploits0References5
Fedora
Fedora
added 2020/11/28 2:5 a.m.22 views

[SECURITY] Fedora 33 Update: pam-1.4.0-9.fc33

PAM Pluggable Authentication Modules is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication...

10CVSS3.5AI score0.01959EPSS
Exploits0
OpenVAS
OpenVAS
added 2020/11/28 12:0 a.m.13 views

Fedora: Security Advisory for pam (FEDORA-2020-22532a1a81)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS9.6AI score0.01959EPSS
Exploits0References2
FireEye
FireEye
added 2020/11/04 12:0 a.m.349 views

In Wild Critical Buffer Overflow Vulnerability in Solaris Can Allow Remote Takeover — CVE-2020-14871

FireEye Mandiant has been investigating compromised Oracle Solaris machines in customer environments. During our investigations, we discovered an exploit tool on a customer’s system and analyzed it to see how it was attacking their Solaris environment. The FLARE team’s Offensive Task Force analyz...

10CVSS0.3AI score0.80291EPSS
Exploits13References4
Tenable Nessus
Tenable Nessus
added 2020/10/28 12:0 a.m.41 views

Amazon Linux AMI : mysql57 (ALAS-2020-1439)

The version of mysql57 installed on the remote host is prior to 5.7.31-1.16. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1439 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are...

6.5CVSS5.7AI score0.02507EPSS
Exploits0References15
OSV
OSV
added 2020/10/21 3:15 p.m.4 views

CVE-2020-14871

Vulnerability in the Oracle Solaris product of Oracle Systems component: Pluggable authentication module. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris...

10CVSS7.3AI score0.80291EPSS
Exploits13References8
NVD
NVD
added 2020/10/21 3:15 p.m.24 views

CVE-2020-14871

Vulnerability in the Oracle Solaris product of Oracle Systems component: Pluggable authentication module. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris...

10CVSS0.80291EPSS
Exploits13References8
Prion
Prion
added 2020/10/21 3:15 p.m.33 views

Code injection

Vulnerability in the Oracle Solaris product of Oracle Systems component: Pluggable authentication module. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris...

10CVSS9.4AI score0.80291EPSS
Exploits13References6Affected Software1
Cvelist
Cvelist
added 2020/10/21 2:4 p.m.29 views

CVE-2020-14871

Vulnerability in the Oracle Solaris product of Oracle Systems component: Pluggable authentication module. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris...

10CVSS9.7AI score0.80291EPSS
Exploits13References7
CVE
CVE
added 2020/10/21 2:4 p.m.1454 views

CVE-2020-14871

CVE-2020-14871 is a pre-authentication stack-based buffer overflow in the Solaris PAM library (parse_user_name) that can be triggered via SSH keyboard-interactive authentication. Affected: Oracle Solaris (versions including 10 and 11; some Solaris 9/11.0 configurations listed in sources). Root ca...

10CVSS9.5AI score0.80291EPSS
In wildExploits13References8Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/10/21 12:0 a.m.257 views

Oracle Solaris Critical Patch Update : oct2020_SRU11_3_36_23_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Pluggable authentication module. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows...

10CVSS8.1AI score0.80291EPSS
Exploits13References4
Tenable Nessus
Tenable Nessus
added 2020/10/21 12:0 a.m.373 views

Oracle Solaris Critical Patch Update : oct2020_SRU11_4_24_75_2

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon t...

10CVSS6.7AI score0.80291EPSS
Exploits13References6
Positive Technologies
Positive Technologies
added 2020/10/20 12:0 a.m.3 views

PT-2020-4751 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris versions 10 and 11 Description: The issue is related to a buffer overflow vulnerability in the Pluggable authentication module of Oracle Solaris, which can be exploited by an unauthenticated attacker with network access via...

10CVSS9.7AI score0.80291EPSS
Exploits13References26
RedHat Linux
RedHat Linux
added 2020/10/05 3:18 p.m.3 views

mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Pluggable Auth. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

4.9CVSS6.8AI score0.03919EPSS
Exploits0References5
OSV
OSV
added 2020/09/24 6:15 p.m.1 views

CVE-2020-3396

A vulnerability in the file system on the pluggable USB 3.0 Solid State Drive SSD for Cisco IOS XE Software could allow an authenticated, physical attacker to remove the USB 3.0 SSD and modify sensitive areas of the file system, including the namespace container protections. The vulnerability...

7.2CVSS7.1AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/09/18 12:0 a.m.1 views

Vulnerability of the MySQL Server component: The Pluggable Auth feature of the MySQL database management system allows attackers to gain access to modify, add, or delete data.

The vulnerability of the MySQL Server component, the Pluggable Auth system for database management, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data using the MySQL Protocol...

4.3CVSS6.5AI score0.01879EPSS
Exploits0References5Affected Software2
RedHat Linux
RedHat Linux
added 2020/09/15 6:30 p.m.4 views

mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Pluggable Auth. Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MyS...

4.3CVSS7.2AI score0.01879EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/09/15 4:18 p.m.0 views

mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Pluggable Auth. Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MyS...

4.3CVSS7.2AI score0.01879EPSS
Exploits0References5
Rows per page
Query Builder