Lucene search
+L

538 matches found

Cvelist
Cvelist
•added 2023/07/31 12:00 a.m.•41 views

CVE-2022-42183

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery SSRF...

9.4AI score0.00698EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/07/31 12:00 a.m.•46 views

CVE-2022-42182

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal...

5.6AI score0.00903EPSS
SaveExploits1References2
CVE
CVE
•added 2023/07/31 12:00 a.m.•57 views

CVE-2022-42183

CVE-2022-42183 refers to Precisely Spectrum Spatial Analyst 20.01 being vulnerable to Server-Side Request Forgery (SSRF). The primary trusted sources indicate an SSRF issue in the product version 20.01, with CVSSv3.1 metrics showing a high impact (base score 9.1) affecting confidentiality and int...

9.1CVSS9.1AI score0.00698EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/07/31 12:00 a.m.•17 views

Precisely Spectrum Spatial Analyst 路径遍历漏洞

Precisely Spectrum Spatial Analyst is a Geographic Information System GIS solution from Precisely, Inc. A security vulnerability exists in Precisely Spectrum Spatial Analyst version 20.01 that stems from vulnerability to directory traversal attacks...

5.3CVSS5.7AI score0.00903EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/07/31 12:00 a.m.•21 views

PT-2023-14068 · Precisely · Precisely Spectrum Spatial Analyst

Name of the Vulnerable Software and Affected Versions: Precisely Spectrum Spatial Analyst version 20.01 Description: The issue is related to Directory Traversal. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where thi...

5.3CVSS5.1AI score0.00903EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/31 12:00 a.m.•8 views

CVE-2022-42183: Server-Side Request Forgery (SSRF)

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery SSRF...

9.1CVSS8.2AI score0.00698EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/05/08 10:57 a.m.•10 views

Malicious code in com.unity.xrtools.spatial-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis efa5d123e10b0da3ed7e7898101f41654aa13a572def7acb40b838e0ef88e74b The OpenSSF Package Analysis project identified 'com.unity.xrtools.spatial-hash' @ 2.0.0 npm as malicious. It is considered malicious because: -...

6.9AI score
SaveExploits0
NCSC
NCSC
•added 2023/04/19 12:00 a.m.•26 views

Vulnerabilities fixed in Oracle Database Server

Vulnerabilities have been fixed in Oracle Database Server. The vulnerabilities allow a malicious party to carry out attacks execute attacks that lead to a denial-of-service DoS or manipulation of data. Oracle has fixed vulnerabilities in the following products: - Oracle Database Server - Oracle...

9.8CVSS7AI score0.99569EPSS
SaveExploits12
IBM Security Bulletins
IBM Security Bulletins
•added 2023/04/06 6:35 p.m.•27 views

Security Bulletin: IBM Informix Dynamic Server is affected when a specific function in the Spatial Datablade is called with an out-of-range parameter

Summary IBM Informix Dynamic Server could crash when a specific function is called with an out-of-range parameter within the Spatial Datablade. A user would need access to the server and the ability to execute arbitrary sql to call this function. If you ARE NOT USING the spatial technology, you c...

7.8CVSS7.7AI score0.00366EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2023/03/01 3:15 p.m.•8 views

DEBIAN-CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits1References1
OSV
OSV
•added 2023/03/01 3:15 p.m.•14 views

UBUNTU-CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8CVSS7.1AI score0.00333EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/03/01 12:00 a.m.•57 views

CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8AI score0.00333EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2023/03/01 12:00 a.m.•78 views

CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits1
CNNVD
CNNVD
•added 2023/03/01 12:00 a.m.•21 views

libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in libde265 version v1.0.10, which stems from a heap-based buffer overflow found in the derivespatiallumavectorprediction method of the motion.cc file...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:48 a.m.•14 views

SUSE CVE-2012-0552

Unspecified vulnerability in the Oracle Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

9CVSS6.2AI score0.02928EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:32 a.m.•13 views

SUSE CVE-2014-0378

Unspecified vulnerability in the Spatial component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

4.1CVSS6.4AI score0.00322EPSS
SaveExploits0References4
Packet Storm
Packet Storm
•added 2023/02/03 12:00 a.m.•482 views

Oracle Database 12.1.0.2 Spatial Component Privilege Escalation

Title: Oracle Database Privilege Escalation Through Oracle Spatial Component Product: Database Manufacturer: Oracle Affected Versions: 12.1.0.2 Tested Versions: 12cR1 Risk Level: High Solution Status: Fixed in Oracle Critical Patch Update October 2021 CVE Reference: N/A, Backported in Oracle CPU...

1.3AI score
SaveExploits0
zdt
zdt
•added 2023/02/03 12:00 a.m.•332 views

Oracle Database 12.1.0.2 Spatial Component Privilege Escalation Vulnerability

Oracle Database version 12.1.0.2 suffers from a privilege escalation vulnerability that achieves DBA access via the Spatial component. Title: Oracle Database Privilege Escalation Through Oracle Spatial Component Product: Database Manufacturer: Oracle Affected Versions: 12.1.0.2 Tested Versions:...

1.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/10/21 12:00 a.m.•77 views

Oracle Database Server (Oct 2022 CPU)

The 19c and 21c versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2022 CPU advisory. - Vulnerability in the Oracle Database - Machine Learning Numpy component of Oracle Database Server. The supported version that ...

9.8CVSS6.7AI score0.81759EPSS
SaveExploits8References25
NCSC
NCSC
•added 2022/10/19 12:00 a.m.•29 views

Vulnerabilities fixed in Oracle Database Server

Vulnerabilities have been fixed in Oracle Database Server. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data Orac...

9.1CVSS6.8AI score0.0486EPSS
SaveExploits2
Rows per page
Query Builder