Lucene search
+L

545 matches found

OSV
OSV
•added 2020/10/08 2:15 p.m.•18 views

CVE-2020-4799

IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability. IBM X-Force ID: 189460...

7.8CVSS7.2AI score0.00366EPSS
SaveExploits0References2
NVD
NVD
•added 2020/10/08 2:15 p.m.•40 views

CVE-2020-4799

IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability. IBM X-Force ID: 189460...

7.8CVSS0.00366EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/10/08 1:20 p.m.•45 views

CVE-2020-4799

IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability. IBM X-Force ID: 189460...

7.8CVSS7.6AI score0.00366EPSS
SaveExploits0References2
CVE
CVE
•added 2020/10/08 1:20 p.m.•85 views

CVE-2020-4799

IBM Informix Spatial Datablade in Informix Dynamic Server 12.10 and 14.10 is affected by CVE-2020-4799, a local-privilege-escalation due to an out-of-bounds write (spatial.bld/ spatial datablade function handling or parsing SQL). Exploitation requires local access and the ability to run SQL; the ...

7.8CVSS7.5AI score0.00366EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/08 12:00 a.m.•49 views

IBM Informix spatial Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of IBM Informix. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the spatial.bld module...

7.8CVSS4.7AI score0.00366EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/08 12:00 a.m.•4 views

CVE-2020-4799: Out-of-bounds Write

IBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability. IBM X-Force ID: 189460...

7.8CVSS6.1AI score0.00366EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/10/07 12:00 a.m.•3 views

PT-2020-5843

Name of the Vulnerable Software and Affected Versions: IBM Informix spatial version 14.10 Description: The issue is related to an out of bounds write vulnerability in the Informix Spatial DataBlade module of the IBM Informix Dynamic Server IDS system. This vulnerability could allow a local user t...

7.8CVSS0.00366EPSS
SaveExploits0References6
Schneier on Security
Schneier on Security
•added 2020/10/02 7:15 p.m.•26 views

COVID-19 and Acedia

Note: This isnt my usual essay topic. Still, I want to put it on my blog. Six months into the pandemic with no end in sight, many of us have been feeling a sense of unease that goes beyond anxiety or distress. Its a nameless feeling that somehow makes it hard to go on with even the nice things we...

7AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2020/10/01 12:00 a.m.•15 views

October 1, 2020—KB4577063 (OS Build 19041.546) Preview

None None...

9CVSS7AI score0.06185EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/09/21 12:00 a.m.•37 views

openSUSE Security Update : libmediainfo / mediainfo (openSUSE-2020-1390)

This update for libmediainfo, mediainfo fixes the following issues : libmediainfo was updated to version 20.08 : Added : - MPEG-H 3D Audio full featured support group presets, switch groups, groups, signal groups - MP4/MOV: support of more metadata locations - JSON and XML outputs: authorize...

7.8CVSS6.8AI score0.01083EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2020/07/31 12:00 a.m.•19 views

The vulnerability of the Windows Spatial Data Service in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Spatial Data Service for Windows operating systems exists due to errors in object processing in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7CVSS7.1AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/07/03 12:00 a.m.•19 views

The vulnerability of the Spatial Data component of the Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the Spatial Data component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score
SaveExploits0References2
CNVD
CNVD
•added 2020/06/23 12:00 a.m.•37 views

Microsoft Windows Spatial Data Service Spatial Data Service Privilege Elevation Vulnerability

Microsoft Windows is a set of operating systems for personal devices from Microsoft.Spatial Data Service is one of the spatial data service components. A security vulnerability exists in Spatial Data Service in Microsoft Windows 10 version 1903 that stems from a program not properly handling...

6.8AI score
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2020/06/17 7:00 a.m.•38 views

Windows Spatial Data Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Spatial Data Service improperly handles objects in memory. An attacker could exploit the vulnerability to overwrite or modify a protected file leading to a privilege escalation. To exploit this vulnerability, an attacker would first...

7CVSS4AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/06/17 12:00 a.m.•6 views

PT-2020-2936

Name of the Vulnerable Software and Affected Versions Windows Spatial Data Service affected versions not specified Description The issue is related to errors in processing objects in memory, which can be exploited by an attacker to elevate their privileges using a specially crafted application...

6.2CVSS
SaveExploits0References7
Veracode
Veracode
•added 2020/04/10 12:22 a.m.•38 views

Denial Of Service (DoS)

mysql is vulnerable to denial of service. A flaw was found in a way MySQL's InnoDB engine handled spatial indexes. An authenticated user could create a table with spatial indexes, which are not supported by the InnoDB engine, that would cause the mysql daemon to crash when used. This issue only...

4CVSS2.4AI score0.11351EPSS
SaveExploits1References30Affected Software1
Microsoft KB
Microsoft KB
•added 2019/08/30 12:00 a.m.•13 views

August 30, 2019—KB4512941 (OS Build 18362.329)

None None...

6.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/07/19 12:00 a.m.•148 views

Oracle Database Server Multiple Vulnerabilities (Jul 2019 CPU)

The remote Oracle Database Server is missing the July 2019 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - An unspecified vulnerability in the Spatial component of Oracle Database Server, which could allow an authenticated, remote attacker to cause a partial...

9.8CVSS6.4AI score0.04012EPSS
SaveExploits1References9
CNVD
CNVD
•added 2019/07/15 12:00 a.m.•25 views

SAP HANA Extended Application Services External Entity Injection Vulnerability

SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions to support users to query real-time business data query and analysis.Extended Application Services is an application server, Web server and SAP HANA System within the Web...

6.5CVSS7.1AI score0.02128EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2018/12/28 4:29 p.m.•11 views

UBUNTU-CVE-2018-20536

There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF spatialreference.cpp in libLAS 1.8.1 that will cause a denial of service...

6.5CVSS6.8AI score0.0143EPSS
SaveExploits1References4
Rows per page
Query Builder