CVE-2019-17498
- EPSS 1.21%
- Veröffentlicht 21.10.2019 22:15:10
- Zuletzt bearbeitet 21.11.2024 04:32:22
In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be ...
CVE-2019-18218
- EPSS 0.17%
- Veröffentlicht 21.10.2019 05:15:10
- Zuletzt bearbeitet 21.11.2024 04:32:51
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
CVE-2019-3004
- EPSS 0.74%
- Veröffentlicht 16.10.2019 18:15:34
- Zuletzt bearbeitet 21.11.2024 04:41:58
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protoco...
CVE-2019-3009
- EPSS 0.42%
- Veröffentlicht 16.10.2019 18:15:34
- Zuletzt bearbeitet 21.11.2024 04:41:58
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection). Supported versions that are affected are 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple ...
CVE-2019-3011
- EPSS 0.74%
- Veröffentlicht 16.10.2019 18:15:34
- Zuletzt bearbeitet 21.11.2024 04:41:59
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocol...
CVE-2019-3018
- EPSS 0.47%
- Veröffentlicht 16.10.2019 18:15:34
- Zuletzt bearbeitet 21.11.2024 04:42:00
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to...
CVE-2019-2991
- EPSS 0.43%
- Veröffentlicht 16.10.2019 18:15:33
- Zuletzt bearbeitet 21.11.2024 04:41:56
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.017 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple prot...
CVE-2019-2993
- EPSS 0.52%
- Veröffentlicht 16.10.2019 18:15:33
- Zuletzt bearbeitet 21.11.2024 04:41:57
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows low privileged attacker with network acces...
CVE-2019-2997
- EPSS 0.12%
- Veröffentlicht 16.10.2019 18:15:33
- Zuletzt bearbeitet 21.11.2024 04:41:57
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols...
CVE-2019-2998
- EPSS 0.42%
- Veröffentlicht 16.10.2019 18:15:33
- Zuletzt bearbeitet 21.11.2024 04:41:57
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro...