6245 matches found
CVE-2021-2144
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Parser. Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...
UBUNTU-CVE-2021-2305
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...
UBUNTU-CVE-2021-2298
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
Code injection
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
CVE-2021-2214
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HT...
CVE-2021-2203
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
Apache Httpd < 2.4.48 : NULL pointer dereference on specially crafted HTTP/2 request
Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating...
Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30873)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Optimizer component in Oracle MySQL Server 5.7.30, 8.0.17 and earlier versions. An attacker could exploit this vulnerability to affect availability...
Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30920)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Group Replication Plugin component in Oracle MySQL Server 8.0.23 and earlier. An attacker can exploit this vulnerability to cause the MySQL server to hang or crash frequently and...
Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30885)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Replication component in Oracle MySQL Server 5.7.32, 8.0.22, and earlier versions. An attacker could exploit this vulnerability to affect availability...
Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30925)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Group Replication Plugin component in Oracle MySQL Server 8.0.23 and earlier. An attacker can exploit this vulnerability to cause the MySQL server to hang or crash frequently and...
PT-2021-6930 · Elcomplus · Elcomplus Smartptt
Name of the Vulnerable Software and Affected Versions: Elcomplus SmartPTT affected versions not specified Description: The issue is related to authorization errors in the Elcomplus SmartPTT scada-server, allowing a low-authenticated user to access higher-level administration authorization. This c...
CVE-2021-2171
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...
Code injection
UNSUPPORTED WHEN ASSIGNED AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affect...
Oracle MySQL Server 输入验证错误漏洞
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the InnoDB component of Oracle MySQL Server 5.7.33, 8.0.23 and earlier versions. An attacker could exploit this vulnerability to affect availability...
CVE-2021-20491
IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-For...
npm a12n-server 安全漏洞
npm a12n-server is an application from the American company npm. It provides a simple authentication system. A security vulnerability exists in a12n-server that allows any logged in user to make changes...
IBM Spectrum Protect 缓冲区错误漏洞
IBM Spectrum Protect is a data protection platform that provides organizations with a single point of control and management for backup and recovery.IBM Spectrum Protect Server is the server of the... A stack buffer overflow vulnerability exists in IBM Spectrum Protect Server versions 7.1 and 8.1...
Ransomware Attack Creates Dutch Cheese Shortages
An Easter weekend ransomware attack on a food-logistics firm in the Netherlands has caused shortages of prepackaged cheese in supermarkets across the country. The largest Dutch grocery store chain had some bad news for a cheese-mad nation. “Due to a technical malfunction, there is limited...
