15 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-61700
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9,...
CVE-2026-61700
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, ClientMessage.readPacket processes a server-initiated LOCAL INFILE protocol packet 0xfb without enforcing allowLocalInfile=false. When an application sen...
EUVD-2026-81903
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, ClientMessage.readPacket processes a server-initiated LOCAL INFILE protocol packet 0xfb without enforcing allowLocalInfile=false. When an application sen...
CVE-2026-55548
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, the PacketsApi.exportPackets endpoint in yamcs-core/src/main/java/org/yamcs/http/api/PacketsApi.java failed to enforce object-level ReadPacket privileges when a request omitted specific packet names: with an empty name list the...
CVE-2026-55548 Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, the PacketsApi.exportPackets endpoint in yamcs-core/src/main/java/org/yamcs/http/api/PacketsApi.java failed to enforce object-level ReadPacket privileges when a request omitted specific packet names: with an empty name list the...
CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
Linux Distros Unpatched Vulnerability : CVE-2021-41036
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket. CVE-2021-41036 Note that Nessus relies on the...
CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
UBUNTU-CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
CVE-2021-41036
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
CVE-2021-41036: Out-of-bounds Write
In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check remlen size in readpacket...
PT-2021-23058
Name of the Vulnerable Software and Affected Versions Eclipse Paho MQTT C Client versions prior to 1.1 Description The Eclipse Paho MQTT C Client does not check the rem len size in the readpacket function. This issue affects versions prior to 1.1. Recommendations For versions prior to 1.1, update...
MQTT buffer error vulnerability
MQTT Message Queuing Telemetry Transport is a messaging protocol based on the Publish/Subscribe paradigm under the ISO standard ISO/IEC PRF 20922, which works on the TCP/IP protocol family and is designed as a publish/subscribe messaging protocol for remote devices with low hardware performance a...