2137 matches found
CVE-2023-36369
An issue in the listappend component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36366
An issue in the logcreatedelta component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause Denial of Service DoS via crafted SQL statements...
CVE-2023-36370
An issue in the gccol component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36364
CVE-2023-36364 affects MonetDB Server v11.45.17 and v11.46.0; the rel_deps component is vulnerable and can cause a Denial of Service via crafted SQL statements. The NVD metrics indicate a Network attack vector, low attack complexity, no privileges required, and a high availability impact. Several...
CVE-2023-36365
An issue in the sqltranscopykey component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36367
An issue in the BLOBcmp component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36368
An issue in the csbindubat component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36366
MonetDB Server vulnerable component: log_create_delta. CVE-2023-36366 affects MonetDB Server versions 11.45.17 and 11.46.0, where crafted SQL statements can cause a Denial of Service (DoS). The connected reports consistently cite the same affected range and DoS impact; no explicit exploit vectors...
CVE-2023-36362
An issue in the relsequences component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36364
An issue in the reldeps component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
Arbitrary Code Execution
ruby-saml is vulnerable to Arbitrary Code Execution. The vulnerability exists due to a lack of using prepared statements in xmlsecurity.rb which allow an attacker to execute arbitrary codes into the system...
Arbitrary Code Execution
Overview Affected versions of this package are vulnerable to Arbitrary Code Execution because prepared statements are not used. Remediation Upgrade zipruby to version 1.3.1 or higher. References - GitHub Commit - GitHub PR - Ruby Advisory-db...
GHSA-R364-2PJ4-PF7F ruby-saml vulnerable to XPath injection
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
ruby-saml vulnerable to XPath injection
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
DEBIAN-CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
Design/Logic Flaw
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
