5042 matches found
[SECURITY] Fedora 31 Update: couchdb-3.0.0-1.fc31
Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database accessible via a RESTful HTTP/JSON API. Among other features, it provides robust, incremental replication with bi-directional conflict detection and resolution, and is queryable and indexable using a...
SUSE-SU-2020:0670-1 Recommended update for SUSE Manager Server 3.2
This update fixes the following issues: spacewalk-setup: - Create AJP connector for tomcat if it does not exist bsc1165927, bsc1166388 How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the patch using either...
PT-2020-6096
Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 11.1 and 11.5 Description The issue is related to insufficient access control in the IBM DB2 database management system when using the SYSIBM schema. Exploitation of this...
PT-2020-2619
Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.19 and prior Description The issue is related to insufficient access control in the MySQL Server product, specifically in the Server: Information Schema component. It allows a highly privileged attacker with network...
CVE-2020-2694
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.18 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...
Debian: Security Advisory (DLA-2088-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vulnerability of the Server component: The Information Schema of the MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.
Vulnerability of the MySQL Server component: The information schema of the MySQL Server database management system is vulnerable due to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using the HTTP protoc...
Information Disclosure
schema-inspector is vulnerable to information disclosure. The vulnerability exists as the sanitize and validate functions can be bypassed, causing object's prototype properties to be enumerable...
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2018-1341)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-10781
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the sanitize and the validate function used within schema-inspector...
CVE-2019-10781
Schema-inspector (JS package) is affected by CVE-2019-10781 through versions before 1.6.9. A specially crafted JavaScript object can bypass sanitize() and validate(), enabling information exposure and potential property tampering. The root cause is the bypass of input sanitisation/validation with...
CVE-2019-10781
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the sanitize and the validate function used within schema-inspector...
CVE-2019-10781
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the sanitize and the validate function used within schema-inspector...
PT-2020-9133
Name of the Vulnerable Software and Affected Versions schema-inspector versions prior to 1.6.9 Description A maliciously crafted JavaScript object can bypass the sanitize and the validate functions used within schema-inspector. Recommendations For versions prior to 1.6.9, update to version 1.6.9 ...
CVE-2019-10781: Exposure of Resource to Wrong Sphere
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the sanitize and the validate function used within schema-inspector...
Libsolv Heap Buffer Overflow Vulnerability
Libsolv is a free package management library. A heap buffer overflow vulnerability exists in repodataschema2id in repodata.c in versions of libsolv prior to 0.7.6. No detailed vulnerability details are provided at this time...
ALPINE-CVE-2019-20388
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...
DEBIAN-CVE-2019-20388
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...