3868 matches found
SUSE CVE-2022-21303
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...
SUSE CVE-2022-21522
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
SUSE CVE-2022-21534
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
SUSE CVE-2022-43945
The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call RPC into a single array of pages. A client can force the send...
Fedora 37 : community-mysql (2023-d332f0b6a3)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d332f0b6a3 advisory. MySQL 8.0.32 Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-32.html Tenable has extracted the preceding description block...
Microsoft Windows ALPC 安全漏洞
Microsoft Windows ALPC is an inter-process communication tool for high-speed messaging from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows ALPC. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for...
The vulnerability of the jsonrpc microprogramming system used in D-Link DIR-825 routers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the jsonrpc microprogramming system used in D-Link DIR-825 routers lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...
OESA-2023-1048 samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: Netlogon RPC Elevation of Privilege Vulnerability.CVE-2022-38023...
Dell EMC NetWorker 代码注入漏洞
Dell EMC NetWorker is a suite of unified backup and recovery software from Dell USA. The software provides backup and recovery, deduplication elimination, backup reporting, and other features. A code injection vulnerability exists in Dell EMC NetWorker. An unauthenticated, remote attacker can sen...
The vulnerability of the Linux operating system’s Network File System kernel allows a hacker to cause a service failure.
The vulnerability of the Linux operating system’s Network File System NFS kernel is related to buffer overflows in the RPC packets being sent and received. Exploiting this vulnerability can allow an attacker to cause a service failure...
kernel: nfsd buffer overflow by RPC message over TCP with garbage data
A buffer overflow flaw was found in the Linux kernel nfsd network file system subsystem. The way a user sends RPC over TCP with excess data added at the end of the message could allow a remote user to starve the resources, causing a denial of service...
kernel: nfsd buffer overflow by RPC message over TCP with garbage data
A buffer overflow flaw was found in the Linux kernel nfsd network file system subsystem. The way a user sends RPC over TCP with excess data added at the end of the message could allow a remote user to starve the resources, causing a denial of service...
kernel: nfsd buffer overflow by RPC message over TCP with garbage data
A buffer overflow flaw was found in the Linux kernel nfsd network file system subsystem. The way a user sends RPC over TCP with excess data added at the end of the message could allow a remote user to starve the resources, causing a denial of service...
CVE-2022-39429
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of...
PT-2023-33668 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4 Description: A potential memory leak issue has been identified. The actual impact and attack plausibility have not yet been proven. This issue is related to the drm/amd/display component. Recommendations: F...
PT-2023-13725 · Oracle · Oracle Database Server +1
Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19c and 21c Description: The issue affects the Java VM component, allowing a low-privileged attacker with Create Procedure privilege and network access via Oracle Net to compromise the Java VM. This can result ...
PT-2023-10816 · Karsany · Karsany Obridge
Name of the Vulnerable Software and Affected Versions: karsany OBridge versions up to 1.3 Description: A critical vulnerability has been found in karsany OBridge, affecting the getAllStandaloneProcedureAndFunction function of the ProcedureDao.java file. This vulnerability leads to sql injection a...
The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code with SYSTEM privileges...
