Lucene search
K

3355 matches found

BDU FSTEC
BDU FSTEC
added 2021/05/14 12:0 a.m.1 views

Vulnerability of the Server component: The Replication function of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.5CVSS6.8AI score0.01337EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/14 12:0 a.m.2 views

Vulnerability of the Server component: The Replication function of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.8CVSS6.8AI score0.01077EPSS
Exploits0References5Affected Software1
Veracode
Veracode
added 2021/05/13 7:4 a.m.27 views

Authorization Bypass

Cyrus IMAP is vulnerable to authorization bypass. A remote authenticated user is able to bypass intended access restrictions on server annotations and consequently cause replication to stall...

4.3CVSS3.4AI score0.00202EPSS
Exploits0References10Affected Software1
Fedora
Fedora
added 2021/05/12 4:13 p.m.58 views

[SECURITY] Fedora 33 Update: redis-6.0.13-1.fc33

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

8.8CVSS0.7AI score0.03301EPSS
Exploits0
NVD
NVD
added 2021/05/12 2:15 p.m.11 views

CVE-2021-31341

Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server and the used XML-framework on the Mendix Database Replication Module All versions prior to v7.0.1...

4.3CVSS0.00199EPSS
Exploits0References2
OSV
OSV
added 2021/05/12 2:15 p.m.1 views

CVE-2021-31341

Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server and the used XML-framework on the Mendix Database Replication Module All versions prior to v7.0.1...

4.3CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2021/05/12 2:15 p.m.14 views

Design/Logic Flaw

Uploading a table mapping using a manipulated XML file results in an exception that could expose information about the application-server and the used XML-framework on the Mendix Database Replication Module All versions prior to v7.0.1...

4CVSS4.4AI score0.00199EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/05/12 1:18 p.m.43 views

CVE-2021-31341

CVE-2021-31341 affects Siemens Mendix Database Replication Module (all versions prior to 7.0.1). The vulnerability arises when uploading a table-mapping via a manipulated XML file, causing an exception that could disclose information about the application server and the XML framework in use. Impa...

4.3CVSS4.4AI score0.00199EPSS
Exploits0References2Affected Software1
Fedora
Fedora
added 2021/05/12 5:44 a.m.57 views

[SECURITY] Fedora 34 Update: redis-6.2.3-1.fc34

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

8.8CVSS0.7AI score0.03301EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2021/05/11 8:55 p.m.24 views

CVE-2021-32056

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall...

4.3CVSS5.5AI score0.00202EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/05/11 12:0 a.m.5 views

Siemens Mendix 安全漏洞

Siemens Mendix is a low-code application development platform from Siemens. The platform provides application development, testing, deployment, and iteration. A security vulnerability exists in Siemens Mendix. The vulnerability stems from the system's use of XML file upload table mappings that...

4.3CVSS5.2AI score0.00199EPSS
Exploits0References5
ICS
ICS
added 2021/05/11 12:0 a.m.48 views

Siemens Mendix Database Replication Module

1. EXECUTIVE SUMMARY CVSS v3 4.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Mendix Database Replication Module Vulnerability: Generation of Error Message Containing Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could...

4.3CVSS4.9AI score0.00199EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2021/05/11 12:0 a.m.24 views

FreeBSD : cyrus-imapd -- Remote authenticated users could bypass intended access restrictions on certain server annotations. (12156786-b18a-11eb-8cba-080027b00c2e)

Cyrus IMAP 3.4.1 Release Notes states : Fixed CVE-2021-32056: Remote authenticated users could bypass intended access restrictions on certain server annotations. Additionally, a long-standing bug in replication did not allow server annotations to be replicated. Combining these two bugs, a remote...

4.3CVSS5.7AI score0.00202EPSS
Exploits0References2
OSV
OSV
added 2021/05/10 3:18 p.m.36 views

GHSA-5PHW-3JRP-3VJ8 Server-Side Request Forgery in Apache Solr

The ReplicationHandler normally registered at "/replication" under a Solr core in Apache Solr has a "masterUrl" also "leaderUrl" alias parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability,...

7.1CVSS9.1AI score0.93901EPSS
Exploits5References13
OSV
OSV
added 2021/05/10 2:15 p.m.2 views

DEBIAN-CVE-2021-32056

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall...

4.3CVSS5.4AI score0.00202EPSS
Exploits0References1
NVD
NVD
added 2021/05/10 2:15 p.m.13 views

CVE-2021-32056

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall...

4.3CVSS0.00202EPSS
Exploits0References6
OSV
OSV
added 2021/05/10 2:15 p.m.21 views

CVE-2021-32056

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall...

4.3CVSS6.4AI score
Exploits0References6
UbuntuCve
UbuntuCve
added 2021/05/10 2:15 p.m.26 views

CVE-2021-32056

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall...

4.3CVSS6.3AI score0.00202EPSS
Exploits0References6
OSV
OSV
added 2021/05/10 2:15 p.m.1 views

UBUNTU-CVE-2021-32056

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall...

4.3CVSS7.2AI score0.00202EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2021/05/10 1:5 p.m.25 views

CVE-2021-32056

Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and consequently cause replication to stall...

4.3CVSS4.8AI score0.00202EPSS
Exploits0
Rows per page
Query Builder