2358 matches found
CVE-2023-36370: Allocation of Resources Without Limits or Throttling
An issue in the gccol component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36368: Allocation of Resources Without Limits or Throttling
An issue in the csbindubat component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36364
CVE-2023-36364 affects MonetDB Server v11.45.17 and v11.46.0; the rel_deps component is vulnerable and can cause a Denial of Service via crafted SQL statements. The NVD metrics indicate a Network attack vector, low attack complexity, no privileges required, and a high availability impact. Several...
CVE-2023-36362
An issue in the relsequences component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36366
MonetDB Server vulnerable component: log_create_delta. CVE-2023-36366 affects MonetDB Server versions 11.45.17 and 11.46.0, where crafted SQL statements can cause a Denial of Service (DoS). The connected reports consistently cite the same affected range and DoS impact; no explicit exploit vectors...
CVE-2023-36369
An issue in the listappend component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36368
An issue in the csbindubat component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36370
An issue in the gccol component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36369
An issue in the listappend component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36368
An issue in the csbindubat component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36362
An issue in the relsequences component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36364
An issue in the reldeps component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
Arbitrary Code Execution
ruby-saml is vulnerable to Arbitrary Code Execution. The vulnerability exists due to a lack of using prepared statements in xmlsecurity.rb which allow an attacker to execute arbitrary codes into the system...
Arbitrary Code Execution
Overview Affected versions of this package are vulnerable to Arbitrary Code Execution because prepared statements are not used. Remediation Upgrade zipruby to version 1.3.1 or higher. References - GitHub Commit - GitHub PR - Ruby Advisory-db...
GHSA-R364-2PJ4-PF7F ruby-saml vulnerable to XPath injection
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
ruby-saml vulnerable to XPath injection
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
DEBIAN-CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
