Lucene search
+L

5388 matches found

CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•7 views

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to compromise MySQL Server via network access over multiple protocols...

4.9CVSS6.5AI score0.01105EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/10/17 12:00 a.m.•19 views

PT-2023-6393 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.34 and prior MySQL Server version 8.1.0 Description: A vulnerability in the MySQL Server product allows a high-privileged attacker with network access via multiple protocols to compromise the server. Successful attac...

9.8CVSS6.7AI score0.78689EPSS
SaveExploits11References637
Positive Technologies
Positive Technologies
•added 2023/10/17 12:00 a.m.•27 views

PT-2023-6381 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.33 and prior Description: The issue is related to the MySQL Server product of Oracle MySQL, specifically the Server: UDF component. It allows a high privileged attacker with network access via multiple protocols to...

9.8CVSS6.6AI score0.78689EPSS
SaveExploits11References621
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•17 views

Oracle MySQL Security Vulnerabilities

Oracle MySQL is an open source relational database management system from Oracle Corporation. A security vulnerability previously existed in Oracle MySQL's MySQL Connectors version 8.1.0, which originated from a vulnerability that could compromise MySQL Connectors by allowing an unauthenticated...

8.3CVSS7.7AI score0.00988EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•6 views

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to compromise MySQL Server via network access over multiple protocols...

4.9CVSS6.5AI score0.01105EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•12 views

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to compromise MySQL Server via network access over multiple protocols...

4.9CVSS6.3AI score0.01048EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/10/17 12:00 a.m.•11 views

PT-2023-6380

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 8.1.0 and prior Description The issue is related to insufficient input validation in the Connector/J component of MySQL Connectors, allowing an unauthenticated attacker with network access via multiple protocols to...

8.9CVSS7.4AI score0.00988EPSS
SaveExploits0References20
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•6 views

Oracle MySQL Security Vulnerabilities

Oracle MySQL is an open source relational database management system from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server versions 8.0.34 and 8.1.0, which originated from a vulnerability that could allow an attacker with elevated privileges to compromise the MySQL serve...

4.9CVSS6.4AI score0.01025EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•15 views

Oracle MySQL Security Vulnerabilities

Oracle MySQL is an open source relational database management system from Oracle Corporation. A security vulnerability previously existed in Oracle MySQL Server version 8.0.34, which originated from a vulnerability that allowed an attacker with elevated privileges to compromise the MySQL server v...

4.9CVSS6.5AI score0.01088EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
•added 2023/10/17 12:00 a.m.•73 views

Important: curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: a heap-based buffer overflow in the SOCKS5 proxy handshake CVE-2023-38545 curl: cookie injection with none file...

9.8CVSS7.3AI score0.78689EPSS
SaveExploits7References6
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•7 views

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to compromise MySQL Server via network access over multiple protocols...

4.9CVSS6.3AI score0.02129EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•8 views

Oracle MySQL Security Vulnerabilities

Oracle MySQL is an open source relational database management system from Oracle Corporation. A security vulnerability previously existed in Oracle MySQL Server version 8.0.34, which originated from a vulnerability that allowed an attacker with elevated privileges to compromise the MySQL server v...

4.9CVSS6.5AI score0.0104EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•11 views

Oracle MySQL Security Vulnerabilities

Oracle MySQL is an open source relational database management system from Oracle Corporation. A security vulnerability previously existed in Oracle MySQL Server versions 5.7.42 and 8.0.31, which originated from a vulnerability that allowed an attacker with elevated privileges to compromise the...

4.9CVSS6.2AI score0.01034EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•9 views

Oracle MySQL Security Vulnerabilities

Oracle MySQL is an open source relational database management system from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server versions 8.0.34 and 8.1.0, which originated from a vulnerability that could allow an attacker with elevated privileges to compromise the MySQL serve...

4.9CVSS6.4AI score0.01105EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2023/10/16 9:15 a.m.•19 views

CVE-2023-5422

The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the SSLgetverifyresult function is not used the certificated is trusted always and it can not be ensured that the certificate satisfies all necessary securit...

9.1CVSS6AI score0.00329EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2023/10/16 9:15 a.m.•25 views

UBUNTU-CVE-2023-5422

The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the SSLgetverifyresult function is not used the certificated is trusted always and it can not be ensured that the certificate satisfies all necessary securit...

9.1CVSS6.1AI score0.00329EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/10/13 12:15 a.m.•29 views

CVE-2023-44182

An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS and Junos OS Evolved, the CLI, the XML API, the XML Management Protocol, the NETCONF Management Protocol, the gNMI interfaces, and the J-Web User Interfaces causes unintended effects such as demotion o...

8.8CVSS7.3AI score0.00704EPSS
SaveExploits0References3
NVD
NVD
•added 2023/10/12 11:15 p.m.•42 views

CVE-2023-36839

An Improper Validation of Specified Quantity in Input vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker who sends specific LLDP packets to cause a Denial of ServiceDoS. This issue occurs when...

6.5CVSS6.5AI score0.00303EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/12 11:15 p.m.•47 views

Input validation

An Improper Validation of Specified Quantity in Input vulnerability in the Layer-2 control protocols daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker who sends specific LLDP packets to cause a Denial of ServiceDoS. This issue occurs when...

3.3CVSS6.5AI score0.00303EPSS
SaveExploits0References1Affected Software2
CVE
CVE
•added 2023/10/12 10:56 p.m.•155 views

CVE-2023-36839

The CVE-2023-36839 issue affects Juniper Networks Junos OS and Junos OS Evolved. Affected component: Layer-2 control protocols daemon (l2cpd). Root cause: Improper validation of specified quantity in input, triggered by specific LLDP packets from an unauthenticated adjacent attacker, leading to a...

6.5CVSS6.4AI score0.00303EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder