Lucene search
+L

4334 matches found

CNNVD
CNNVD
•added 2021/04/20 12:00 a.m.•11 views

Oracle MySQL Server 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Group Replication Plugin component in Oracle MySQL Server 5.7.33, 8.0.23, and earlier versions. An attacker could exploit this vulnerability to affect availability...

4.9CVSS5.2AI score0.02126EPSS
SaveExploits0References19
CNNVD
CNNVD
•added 2021/04/20 12:00 a.m.•10 views

Oracle MySQL Server 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Replication component in Oracle MySQL Server 5.7.32, 8.0.22, and earlier versions. An attacker could exploit this vulnerability to affect availability...

6.5CVSS5.2AI score0.02093EPSS
SaveExploits0References17
CNNVD
CNNVD
•added 2021/04/20 12:00 a.m.•7 views

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Group Replication Plugin component in Oracle MySQL Server 8.0.23 and earlier. An attacker can exploit this vulnerability to cause the MySQL server to hang or crash frequently and...

4.9CVSS5.2AI score0.01319EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2021/04/20 12:00 a.m.•2 views

PT-2021-3030

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.23 and prior Description The issue is related to insufficient input validation in the Server: Group Replication Plugin component of Oracle MySQL Server. It allows a high-privileged attacker with logon to the...

4.9CVSS0.04909EPSS
SaveExploits0References372
CNNVD
CNNVD
•added 2021/04/20 12:00 a.m.•12 views

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Group Replication Plugin component in Oracle MySQL Server 8.0.23 and earlier. An attacker can exploit this vulnerability to cause the MySQL server to hang or crash frequently and...

4.9CVSS5.2AI score0.01238EPSS
SaveExploits0References15
CNNVD
CNNVD
•added 2021/04/20 12:00 a.m.•11 views

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Group Replication Plugin component in Oracle MySQL Server 8.0.23 5.7.33 and earlier versions. An attacker can exploit this vulnerability to cause MySQL Server to hang or to crash...

4.9CVSS6.5AI score0.01987EPSS
SaveExploits0References21
CNNVD
CNNVD
•added 2021/04/20 12:00 a.m.•10 views

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Replication component in Oracle MySQL Server 5.7.33, 8.0.23, and earlier versions. An attacker could exploit this vulnerability to affect availability...

4.4CVSS6.5AI score0.01803EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
•added 2021/04/20 12:00 a.m.•2 views

PT-2021-3019

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.33 and prior MySQL Server versions 8.0.23 and prior Description The issue is related to insufficient input validation in the MySQL Server component, specifically in the Server: Replication subcomponent. This can be...

7.2CVSS0.01803EPSS
SaveExploits0References398
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•26 views

PT-2021-7264 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the Linux kernel NFS subsystem allows for an out of memory bounds write, potentially enabling a user with access to the NFS mount to crash the system or escalate privileges...

9.8CVSS6.6AI score0.92795EPSS
SaveExploits204References883
osv_debian
osv_debian
•added 2021/04/13 7:15 a.m.•11 views

DEBIAN-CVE-2021-27905

The ReplicationHandler normally registered at "/replication" under a Solr core in Apache Solr has a "masterUrl" also "leaderUrl" alias parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability,...

9.8CVSS8.4AI score0.93053EPSS
SaveExploits5References1
osv_ubuntu
osv_ubuntu
•added 2021/04/13 7:15 a.m.•20 views

UBUNTU-CVE-2021-27905

The ReplicationHandler normally registered at "/replication" under a Solr core in Apache Solr has a "masterUrl" also "leaderUrl" alias parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability,...

9.8CVSS7.3AI score0.93053EPSS
SaveExploits5References3
attackerkb
attackerkb
•added 2021/04/13 7:15 a.m.•14 views

CVE-2021-27905

The ReplicationHandler normally registered at "/replication" under a Solr core in Apache Solr has a "masterUrl" also "leaderUrl" alias parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability,...

9.8CVSS8.3AI score0.93053EPSS
SaveExploits5References23
Cvelist
Cvelist
•added 2021/04/13 6:35 a.m.•43 views

CVE-2021-27905 SSRF vulnerability with the Replication handler

The ReplicationHandler normally registered at "/replication" under a Solr core in Apache Solr has a "masterUrl" also "leaderUrl" alias parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability,...

9.4AI score0.93053EPSS
SaveExploits5References12
Positive Technologies
Positive Technologies
•added 2021/04/01 12:00 a.m.•13 views

PT-2021-7757 · Red Hat +6 · 389 Directory Server +7

Name of the Vulnerable Software and Affected Versions: 389 Directory Server versions affected versions not specified Description: The issue is related to a NULL pointer dereference error. An authenticated attacker can cause a crash by using a specially crafted query with a sync repl client in...

7.5CVSS6AI score0.08202EPSS
SaveExploits4References75
RedHat Linux
RedHat Linux
•added 2021/03/25 12:18 p.m.•99 views

Moderate: Red Hat Security Advisory: rhvm-appliance security, bug fix, and enhancement update

An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.8CVSS7.3AI score0.05473EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/03/25 12:18 p.m.•10 views

postgresql: Uncontrolled search path element in logical replication

A flaw was found in PostgreSQL, where it did not properly sanitize the searchpath during logical replication. This flaw allows an authenticated attacker to use this flaw in an attack similar to CVE-2018-1058 to execute an arbitrary SQL command in the user's context for replication. The highest...

7.1CVSS7.5AI score0.02235EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2021/03/25 12:00 a.m.•57 views

RHEL 8 : rhvm-appliance (RHSA-2021:0988)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0988 advisory. The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is availab...

9.8CVSS7.4AI score0.05473EPSS
SaveExploits0References10
Citrix
Citrix
•added 2021/03/22 12:00 a.m.•29 views

StoreFront propagation fails with "Access is denied" error / joining the server group fails

When attempting to join the secondary storefront server the server group fails, Below events logged in the Primary storefront server Event ID2850,2203 === "An error occurred while executing the following command: 'Remove-DSClusterMember' The access was denied. === Or When attempting to propagate...

7AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/03/19 3:15 a.m.•15 views

CVE-2021-27928

A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database...

9CVSS8.6AI score0.38436EPSS
SaveExploits9References10
Veeam
Veeam
•added 2021/03/15 12:00 a.m.•86 views

Release Information for Everpure FlashArray Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing Everpure FlashArray Plug-In v2.2.331, ensure that you are running Veeam Backup &...

5.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder