Lucene search
+L

510 matches found

Vulnrichment
Vulnrichment
•added 2023/07/31 12:00 a.m.•18 views

CVE-2022-42183

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery SSRF...

7.2AI score0.00698EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/07/31 12:00 a.m.•40 views

CVE-2022-42182

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal...

5.6AI score0.00903EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/31 12:00 a.m.•2 views

CVE-2022-42182: Improper Limitation of a Pathname to a Restricted Directory

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal...

5.3CVSS6AI score0.00903EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/31 12:00 a.m.•2 views

CVE-2022-42183: Server-Side Request Forgery (SSRF)

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery SSRF...

9.1CVSS8.2AI score0.00698EPSS
SaveExploits1References2
CVE
CVE
•added 2023/07/31 12:00 a.m.•53 views

CVE-2022-42183

CVE-2022-42183 refers to Precisely Spectrum Spatial Analyst 20.01 being vulnerable to Server-Side Request Forgery (SSRF). The primary trusted sources indicate an SSRF issue in the product version 20.01, with CVSSv3.1 metrics showing a high impact (base score 9.1) affecting confidentiality and int...

9.1CVSS9.1AI score0.00698EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/07/31 12:00 a.m.•14 views

Precisely Spectrum Spatial Analyst 路径遍历漏洞

Precisely Spectrum Spatial Analyst is a Geographic Information System GIS solution from Precisely, Inc. A security vulnerability exists in Precisely Spectrum Spatial Analyst version 20.01 that stems from vulnerability to directory traversal attacks...

5.3CVSS5.7AI score0.00903EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/07/31 12:00 a.m.•12 views

CVE-2022-42182

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal...

7.1AI score0.00903EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/05/08 10:57 a.m.•10 views

Malicious code in com.unity.xrtools.spatial-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis efa5d123e10b0da3ed7e7898101f41654aa13a572def7acb40b838e0ef88e74b The OpenSSF Package Analysis project identified 'com.unity.xrtools.spatial-hash' @ 2.0.0 npm as malicious. It is considered malicious because: -...

6.9AI score
SaveExploits0
NCSC
NCSC
•added 2023/04/19 12:00 a.m.•20 views

Vulnerabilities fixed in Oracle Database Server

Vulnerabilities have been fixed in Oracle Database Server. The vulnerabilities allow a malicious party to carry out attacks execute attacks that lead to a denial-of-service DoS or manipulation of data. Oracle has fixed vulnerabilities in the following products: - Oracle Database Server - Oracle...

9.8CVSS7AI score0.99569EPSS
SaveExploits12
IBM Security Bulletins
IBM Security Bulletins
•added 2023/04/06 6:35 p.m.•26 views

Security Bulletin: IBM Informix Dynamic Server is affected when a specific function in the Spatial Datablade is called with an out-of-range parameter

Summary IBM Informix Dynamic Server could crash when a specific function is called with an out-of-range parameter within the Spatial Datablade. A user would need access to the server and the ability to execute arbitrary sql to call this function. If you ARE NOT USING the spatial technology, you c...

7.8CVSS7.7AI score0.00366EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2023/03/01 3:15 p.m.•4 views

DEBIAN-CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits1References1
OSV
OSV
•added 2023/03/01 3:15 p.m.•13 views

UBUNTU-CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8CVSS7.1AI score0.00333EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/03/01 12:00 a.m.•17 views

libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in libde265 version v1.0.10, which stems from a heap-based buffer overflow found in the derivespatiallumavectorprediction method of the motion.cc file...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/03/01 12:00 a.m.•52 views

CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8AI score0.00333EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2023/03/01 12:00 a.m.•77 views

CVE-2023-25221

Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derivespatiallumavectorprediction function in motion.cc...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2023/02/15 5:48 a.m.•13 views

SUSE CVE-2012-0552

Unspecified vulnerability in the Oracle Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

9CVSS6.2AI score0.02928EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:32 a.m.•13 views

SUSE CVE-2014-0378

Unspecified vulnerability in the Spatial component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

4.1CVSS6.4AI score0.00322EPSS
SaveExploits0References4
zdt
zdt
•added 2023/02/03 12:00 a.m.•330 views

Oracle Database 12.1.0.2 Spatial Component Privilege Escalation Vulnerability

Oracle Database version 12.1.0.2 suffers from a privilege escalation vulnerability that achieves DBA access via the Spatial component. Title: Oracle Database Privilege Escalation Through Oracle Spatial Component Product: Database Manufacturer: Oracle Affected Versions: 12.1.0.2 Tested Versions:...

1.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2023/02/03 12:00 a.m.•478 views

Oracle Database 12.1.0.2 Spatial Component Privilege Escalation

Title: Oracle Database Privilege Escalation Through Oracle Spatial Component Product: Database Manufacturer: Oracle Affected Versions: 12.1.0.2 Tested Versions: 12cR1 Risk Level: High Solution Status: Fixed in Oracle Critical Patch Update October 2021 CVE Reference: N/A, Backported in Oracle CPU...

1.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/10/21 12:00 a.m.•73 views

Oracle Database Server (Oct 2022 CPU)

The 19c and 21c versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2022 CPU advisory. - Vulnerability in the Oracle Database - Machine Learning Numpy component of Oracle Database Server. The supported version that ...

9.8CVSS6.7AI score0.81759EPSS
SaveExploits10References25
Rows per page
Query Builder