3786 matches found
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of service attacks. A remote authenticated user with high privileges could compromise MySQL Server via multiple protocols resulting in a system crash. Affected is the component Performance Schema...
Latest Bypassing Techniques Beat SOAP/XML API Protection
It is impossible to protect APIs unless you take a deep dive into the protocols implemented over the standard HTTP. Most security tools are not protecting data where it’s most vulnerable, inside the XML schema itself. These encoding attacks are going unflagged by many application platforms, despi...
Latest Bypassing Techniques Beats SOAP/XML API Protection
Latest Bypassing Techniques Beat SOAP/XML API Protection It is impossible to protect APIs unless you take a deep dive into the protocols implemented over the standard HTTP. Most security tools are not protecting data where it’s most vulnerable, inside the XML schema itself. These encoding attacks...
Fedora Update for jackson-module-jsonSchema FEDORA-2019-df57551f6d
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of service attacks. A remote, authenticated attacker could exploit the flawed Performance Schema component to cause a hang or frequently repeatable crash resulting in denial of service conditions...
Improper Access Control
MySQL is using improper access control. It allows remote authenticated users to affect availability via unknown vectors related to Information Schema...
Vulnerability of the Server component: The Information Schema of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
Vulnerability of the Server component: The information schema of the Oracle MySQL Server database management system is vulnerable due to a lack of access control. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
CVE-2019-2631
Mode C: CVE-2019-2631 is a vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Information Schema). Affected versions are 8.0.15 and earlier. It allows a high-privileged attacker who can access the server over network protocols to cause the MySQL Server to hang or crash (co...
Design/Logic Flaw
In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir defaulting to $HOME/.kube/http-cache, written with world-writeable permissions rw-rw-rw-. If --cache-dir is specified and pointed at a different location accessible to other users/groups, the...
CVE-2019-11244
In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir defaulting to $HOME/.kube/http-cache, written with world-writeable permissions rw-rw-rw-. If --cache-dir is specified and pointed at a different location accessible to other users/groups, the...
CVE-2019-11244
In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir defaulting to $HOME/.kube/http-cache, written with world-writeable permissions rw-rw-rw-. If --cache-dir is specified and pointed at a different location accessible to other users/groups, the...
CVE-2019-11244 kubectl creates world-writeable cached schema files
In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir defaulting to $HOME/.kube/http-cache, written with world-writeable permissions rw-rw-rw-. If --cache-dir is specified and pointed at a different location accessible to other users/groups, the...
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-10370)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Information Schema subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.15 and...
`kubectl --http-cache=<world-accessible dir>` creates world-writeable cached schema files
In kubectl v1.8.0+, schema info is cached in the location specified by --cache-dir defaulting to $HOME/.kube/http-cache, written with world-writeable permissions rw-rw-rw-. If --cache-dir is specified and pointed at a different location accessible to other users/groups, the written files may be...
PT-2019-1963 · Oracle +6 · Mysql Server +5
Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.15 and prior Description: The issue is related to a lack of access control in the MySQL Server component, specifically in the Server: Information Schema subcomponent. This allows a high-privileged attacker with netwo...
SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2019:0609-1)
This update for mariadb to version 10.2.22 fixes the following issues : Security issues fixed bsc1122198 : CVE-2019-2510: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service. CVE-2019-2537: Fixed a vulnerability which can lead to MySQL compromise and lead to...
OrientDB 3.0.17 GA Community Edition - Cross-Site Request Forgery / Cross-Site Scripting
Exploit for multiple platform in category web applications Exploit Title: OrientDB 3.0.17 GA Community Edition March 7th, 2019 | Multiple Vulnerabilities Date: 07.03.2019 Exploit Author: Ozer Goker Vendor Homepage: https://orientdb.org Software Link: https://orientdb.org/download Version: 3.0.17 ...
OrientDB 3.0.17 GA Community Edition - Cross-Site Request Forgery / Cross-Site Scripting
Exploit Title: OrientDB 3.0.17 GA Community Edition March 7th, 2019 | Multiple Vulnerabilities Date: 07.03.2019 Exploit Author: Ozer Goker Vendor Homepage: https://orientdb.org Software Link: https://orientdb.org/download Version: 3.0.17 GA Community Edition March 7th, 2019 Introduction OrientDB ...
OrientDB 3.0.17 GA Community Edition XSS / CSRF
Exploit Title: OrientDB 3.0.17 GA Community Edition March 7th, 2019 | Multiple Vulnerabilities Date: 07.03.2019 Exploit Author: Ozer Goker Vendor Homepage: https://orientdb.org Software Link: https://orientdb.org/download Version: 3.0.17 GA Community Edition March 7th, 2019 Introduction OrientDB ...
