Lucene search
K

3370 matches found

CNNVD
CNNVD
added 2021/04/20 12:0 a.m.2 views

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Group Replication Plugin component in Oracle MySQL Server 8.0.23 and earlier. An attacker can exploit this vulnerability to cause the MySQL server to hang or crash frequently and...

4.9CVSS5.2AI score0.01167EPSS
Exploits0References15
CNNVD
CNNVD
added 2021/04/20 12:0 a.m.2 views

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Replication component in Oracle MySQL Server 5.7.33, 8.0.23, and earlier versions. An attacker could exploit this vulnerability to affect availability...

4.4CVSS5.2AI score0.01803EPSS
Exploits0References19
CNNVD
CNNVD
added 2021/04/20 12:0 a.m.3 views

Oracle MySQL Server 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Group Replication Plugin component in Oracle MySQL Server 5.7.33, 8.0.23, and earlier versions. An attacker could exploit this vulnerability to affect availability...

4.9CVSS5.2AI score0.02043EPSS
Exploits0References19
CNNVD
CNNVD
added 2021/04/20 12:0 a.m.2 views

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Group Replication Plugin component in Oracle MySQL Server 8.0.23 and earlier. An attacker can exploit this vulnerability to cause the MySQL server to hang or crash frequently and...

4.9CVSS5.2AI score0.01283EPSS
Exploits0References15
Positive Technologies
Positive Technologies
added 2021/04/14 12:0 a.m.10 views

PT-2021-7264 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the Linux kernel NFS subsystem allows for an out of memory bounds write, potentially enabling a user with access to the NFS mount to crash the system or escalate privileges...

9.8CVSS7.2AI score0.89063EPSS
Exploits212References883
OSV
OSV
added 2021/04/13 7:15 a.m.5 views

DEBIAN-CVE-2021-27905

The ReplicationHandler normally registered at "/replication" under a Solr core in Apache Solr has a "masterUrl" also "leaderUrl" alias parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability,...

9.8CVSS8.4AI score0.93053EPSS
Exploits5References1
OSV
OSV
added 2021/04/13 7:15 a.m.3 views

UBUNTU-CVE-2021-27905

The ReplicationHandler normally registered at "/replication" under a Solr core in Apache Solr has a "masterUrl" also "leaderUrl" alias parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability,...

9.8CVSS7.3AI score0.93053EPSS
Exploits5References3
Cvelist
Cvelist
added 2021/04/13 6:35 a.m.20 views

CVE-2021-27905 SSRF vulnerability with the Replication handler

The ReplicationHandler normally registered at "/replication" under a Solr core in Apache Solr has a "masterUrl" also "leaderUrl" alias parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability,...

9.4AI score0.93053EPSS
Exploits5References12
Positive Technologies
Positive Technologies
added 2021/04/01 12:0 a.m.4 views

PT-2021-7757 · Red Hat +6 · 389 Directory Server +7

Name of the Vulnerable Software and Affected Versions: 389 Directory Server versions affected versions not specified Description: The issue is related to a NULL pointer dereference error. An authenticated attacker can cause a crash by using a specially crafted query with a sync repl client in...

7.5CVSS6AI score0.08426EPSS
Exploits4References75
RedHat Linux
RedHat Linux
added 2021/03/25 12:18 p.m.2 views

postgresql: Uncontrolled search path element in logical replication

A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...

8.8CVSS7.3AI score0.14142EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2021/03/25 12:18 p.m.86 views

Moderate: Red Hat Security Advisory: rhvm-appliance security, bug fix, and enhancement update

An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.8CVSS7.3AI score0.05448EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2021/03/25 12:0 a.m.51 views

RHEL 8 : rhvm-appliance (RHSA-2021:0988)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0988 advisory. The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is availab...

9.8CVSS7.7AI score0.05448EPSS
Exploits1References10
Citrix
Citrix
added 2021/03/22 12:0 a.m.13 views

StoreFront propagation fails with "Access is denied" error / joining the server group fails

When attempting to join the secondary storefront server the server group fails, Below events logged in the Primary storefront server Event ID2850,2203 === "An error occurred while executing the following command: 'Remove-DSClusterMember' The access was denied. === Or When attempting to propagate...

7AI score
Exploits0
Veeam
Veeam
added 2021/03/15 12:0 a.m.20 views

Release Information for Everpure FlashArray Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing Everpure FlashArray Plug-In v2.2.331, ensure that you are running Veeam Backup &...

5.7AI score
Exploits0Affected Software1
Veeam
Veeam
added 2021/03/15 12:0 a.m.16 views

Release Information for DataCore Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing DataCore Plug-In v1.2.2, ensure that you are running Veeam Backup & Replication 12.3.0.3...

6.9AI score
Exploits0Affected Software1
Veeam
Veeam
added 2021/03/11 12:0 a.m.23 views

Release Notes for Veeam Backup & Replication 11 Cumulative Patches

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Requirements Please confirm that you are running V11 GA build 11.0.0.837 of any earlier patch level prior to installing this update. You can check this under Help |...

9.8CVSS9.4AI score0.01239EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2021/03/09 12:0 a.m.4 views

IBM API Connect Information Disclosure Vulnerability (CNVD-2021-17207)

IBM API Connect is a comprehensive end-to-end API lifecycle solution. An information disclosure vulnerability exists in IBM API Connect 10.0.1.0. The vulnerability stems from insecure communication during database replication. An attacker could exploit the vulnerability to view unencrypted data...

7.5CVSS5.9AI score0.00773EPSS
Exploits0References1
OSV
OSV
added 2021/03/08 6:15 p.m.1 views

CVE-2020-4695

IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens over insecure communication channels, an attacker can view unencrypted data leading to a loss of confidentiality...

7.5CVSS5.8AI score0.00773EPSS
Exploits0References2
NVD
NVD
added 2021/03/08 6:15 p.m.11 views

CVE-2020-4695

IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens over insecure communication channels, an attacker can view unencrypted data leading to a loss of confidentiality...

7.5CVSS0.00773EPSS
Exploits0References2
Prion
Prion
added 2021/03/08 6:15 p.m.17 views

Design/Logic Flaw

IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens over insecure communication channels, an attacker can view unencrypted data leading to a loss of confidentiality...

5CVSS7.3AI score0.00773EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder