4044 matches found
UBUNTU-CVE-2023-0411
Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
...
Checkmk 输入验证错误漏洞
Checkmk is an editor. Checkmk has a security vulnerability that stems from its incorrect input validation of LDAP user ids allowing an attacker who has control over the LDAP user id to manipulate files on the server. The following versions are affected: 2.1.0p19 and earlier, 2.0.0p32 and earlier,...
Pi-hole 代码问题漏洞
Pi-hole is a web-grade ad-blocking application from Pi-hole, Inc. A security vulnerability exists in the Pi-hole web interface version 4.0 through versions prior to 5.18.3, which stems from improper use of cookie values...
Revenue Collection System 安全漏洞
Revenue Collection System is a land property billing and payment software by Carlo Montero Individual Developer. A security vulnerability exists in Revenue Collection System version v1.0 that stems from improper access control of its /admin/DBbackup/ component allowing an unauthenticated attacker...
Vim 安全漏洞
Vim is a cross-platform text editor. A security vulnerability exists in versions prior to vim/vim 9.0.1225 that stems from a heap-based buffer overflow...
CVE-2022-43455
Sewio’s Real-Time Location System RTLS Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to the servicestart, servicestop, and servicerestart modules of the software. This could allow an attacker to start, stop, or restart arbitrary...
AZL-13103 CVE-2023-21881 affecting package mysql for versions less than 8.0.32-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
UBUNTU-CVE-2023-21869
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...
UBUNTU-CVE-2023-21874
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Thread Pooling. Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...
inxedu SQL注入漏洞
Inxedu inxedu is a set of open source online education platform of China Inxedu Inxedu company. The platform includes an online school system, a live broadcasting system, an examination system and a marketing website. SQL injection vulnerability exists in inxedu version 2.0.6, the vulnerability...
CVE-2022-43462
Auth. SQL Injection SQLi vulnerability in Adeel Ahmed's IP Blacklist Cloud plugin = 5.00 versions...
PT-2023-33162 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves re-fetching the skb cb after tipc msg validate. The actual impact and attack plausibility have not...
PT-2023-33500 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to a use-after-free error in the qlcnic dcb enable function. This error occurs when the qlcnic dcb enable function fails, potentially leading to a security issue. The...
PT-2023-33876 · Libbpf · Libbpf
Name of the Vulnerable Software and Affected Versions: libbpf versions prior to v6.0.16 Description: The issue is related to the use of e shnum instead of elf getshdrnum. It was introduced in Linux Kernel version v5.17 and fixed in version v6.0.16. The actual impact and attack plausibility have n...
PT-2023-33457 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to error handling in the kfd process device init vm function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
Froxlor 安全漏洞
Froxlor is a lightweight server management software from the Froxlor team. A security vulnerability exists in Froxlor versions prior to 2.0.0 that stems from the presence of a path traversal...
PT-2023-14306
Name of the Vulnerable Software and Affected Versions Apache Superset versions 1.5.2 and prior Apache Superset version 2.0.0 Description An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not get properly escaped by the toast messag...
