CVE-2021-2308

Removed by vendor...

CVE-2021-2301

CVE-2021-2301 affects Oracle MySQL Server (component: Server: Information Schema). Public records show affected versions up to 8.0.23. The vulnerability allows a high-privilege attacker with network access via multiple protocols to obtain unauthorized read access from the Information Schema data....

CVE-2021-2226

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

CVE-2021-2226

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

CVE-2021-2226

Removed by vendor...

Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30523)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Information Schema component of Oracle MySQL Server 8.0.23 and earlier. An attacker could exploit the vulnerability to compromise confidentiality...

Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30524)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Information Schema component of Oracle MySQL Server 8.0.23 and earlier. An attacker could exploit the vulnerability to compromise confidentiality...

HashiCorp Consul and Consul Enterprise 跨站脚本漏洞

Hashicorp HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp Hashicorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. A security vulnerability exists in HashiCorp Consul and Consu...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Information Schema component in Oracle MySQL Server 5.7.33, 8.0.23 and earlier versions. An attacker could exploit the vulnerability to compromise confidentiality...

Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Information Schema component of Oracle MySQL Server 8.0.23 and earlier. An attacker could exploit the vulnerability to compromise confidentiality...

GHSA-4HV7-3Q38-97M8 Arbitrary code execution in djv

This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine...

Arbitrary code execution in djv

This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine...

OESA-2021-1144 rubygem-nokogiri security update

Nokogiri parses and searches XML/HTML very quickly, and also has correctly implemented CSS3 selector support as well as XPath support. Nokogiri also features an Hpricot compatibility layer to help ease the change to using correct CSS and XPath. Security Fixes: Nokogiri is a Rubygem providing HTML...

OESA-2021-1119 openldap security update

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

Hackers are implanting multiple backdoors at industrial targets in Japan

Cybersecurity researchers on Tuesday disclosed details of a sophisticated campaign that deploys malicious backdoors for the purpose of exfiltrating information from a number of industry sectors located in Japan. Dubbed "A41APT" by Kaspersky researchers, the findings delve into a new slew of attac...

Ovidentia 6 SQL Injection

Exploit Title: Ovidentia 6 - 'id' SQL injection Authenticated Exploit Author: Felipe Prates Donato m4ud Vendor Homepage: http://www.ovidentia.org Version: 6 DORK : "Powered by Ovidentia" http://Site/ovidentia/index.php?tg=delegat&idx=mem&id=1 UNION Select select...

Ovidentia 6 - (id) SQL injection (Authenticated) Vulnerability

Exploit Title: Ovidentia 6 - 'id' SQL injection Authenticated Exploit Author: Felipe Prates Donato m4ud Vendor Homepage: http://www.ovidentia.org Version: 6 DORK : "Powered by Ovidentia" http://Site/ovidentia/index.php?tg=delegat&idx=mem&id=1 UNION Select select...

Regular Expression Denial Of Service (ReDoS)

schema-inspector is vulnerable to regular expression denial of service ReDoS. The vulnerability exists through the email validation method where an input such as example@0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0. would result in large consumption of...

CVE-2021-21267

Schema-Inspector is an open-source tool to sanitize and validate JS objects npm package schema-inspector. In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input for example...

CVE-2021-21267

Schema-Inspector is an open-source tool to sanitize and validate JS objects npm package schema-inspector. In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input for example...