Dotkliwość: Wysoka

Luka w IBM Guardium Data Protection umożliwia zdalnemu uwierzytelnionemu atakującemu przejście przez katalogi.

Wstrzyknięcie poleceń w IBM Guardium umożliwia wykonanie kodu z uprawnieniami roota.

Wstrzyknięcie SQL w IBM Guardium Data Protection umożliwia nieautoryzowany dostęp do danych.

Wstrzyknięcie poleceń w IBM Guardium umożliwia zdalne wykonanie kodu z uprawnieniami roota.

Brak autoryzacji w IBM Guardium Data Protection umożliwia zdalnemu atakującemu eskalację uprawnień.

Nieprawidłowe neutralizowanie elementów w IBM Guardium Data Protection umożliwia zdalne wykonanie poleceń.

Wstrzyknięcie poleceń w IBM Guardium Data Protection umożliwia wykonanie nieautoryzowanych komend.

Nieprawidłowa walidacja danych w IBM Guardium Data Protection umożliwia wykonanie dowolnych poleceń przez uwierzytelnionego użytkownika.

Wstrzyknięcie SQL w IBM Guardium Data Protection umożliwia nieautoryzowany dostęp do danych.

Wstrzyknięcie SQL w IBM Guardium Data Protection umożliwia nieautoryzowany dostęp do danych.

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, inherit_template_properties() manually surrounds primary-key column names from…

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, drop_partition_id() and drop_partition_time() use part_config.retention_schema as the…

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance(), show_partitions(), show_partition_info(), undo_partition(), and…

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() reads part_config.time_encoder as unrestricted text and interpolates it…

pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, when pg_jobmon is installed and part_config.jobmon is true, exception handlers in…

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index…

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loop_start and wsmp.loop_length…

IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information…

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of…

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing.

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message…

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to…

Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-doc) that allows remote unauthenticated attackers to read arbitrary files by supplying a relative…

In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases for every project without enforcing project scoping or an administrator-only policy. Any…