3154 matches found
CVE-2023-48949
The evidence in the connected documents confirms a concrete vulnerability in openlink virtuoso-opensource v7.2.11 affecting the box_add function, which can lead to a Denial of Service after executing a SELECT statement. Affected component: virtuoso-opensource 7.2.11 (box_add). Root cause details ...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
VulnCheck KEV: CVE-2023-1454
A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...
mariadb: server crash in st_select_lex_unit::exclude_level
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel...
mariadb: segmentation fault via the component sub_select
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...
mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements
MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements...
mariadb: server crash in Item_field::fix_outer_field for INSERT SELECT
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Itemfield::fixouterfield...
mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...
mariadb: server crashes in query_arena::set_query_arena upon SELECT from view
A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlclass.cc, impacting availability...
BIT-2021-46668
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...
select-stallbau.de Improper Access Control vulnerability OBB-3767782
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
DEBIAN-CVE-2023-46287
XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php...
UBUNTU-CVE-2023-46287
XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php...
Cross site scripting
XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php...
CVE-2023-46287
XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php...
CVE-2023-46287
XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php...
CVE-2023-46287: Improper Neutralization of Input During Web Page Generation
XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php...
CVE-2023-46287
XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php...
CVE-2023-46287
XSS exists in NagVis before 1.9.38 via the select function in share/server/core/functions/html.php...
CVE-2023-22074
Vulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11. Easily exploitable vulnerability allows high privileged attacker having Create Session, Select Any Dictionary privilege with network access via...