CVE-2013-3793

mysql: unspecified DoS related to Data Manipulation Language (CPU July 2013)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language.

CVSS 2.0 · 4.0 Medium EPSS 3.1% KEV · Not listed

Vendors

Canonical Debian Mariadb and 3 more

Products

Ubuntu Linux Debian Linux Mariadb and 6 more

CVE-2013-3794

mysql: unspecified DoS related to Server Partition (CPU July 2013)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Partition.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Mariadb Opensuse Oracle and 1 more

Products

Mariadb Opensuse Mysql and 4 more

CVE-2013-3801

mysql: unspecified DoS related to Server Options (CPU July 2013)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Options.

CVSS 2.0 · 5.0 Medium EPSS 3.8% KEV · Not listed

Vendors

Mariadb Opensuse Oracle and 1 more

Products

Mariadb Opensuse Mysql and 3 more

CVE-2013-3802

mysql: unspecified DoS related to Full Text Search (CPU July 2013)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Full Text Search.

CVSS 2.0 · 4.0 Medium EPSS 3.3% KEV · Not listed

Vendors

Canonical Debian Mariadb and 4 more

Products

Ubuntu Linux Debian Linux Mariadb and 6 more

CVE-2013-3804

mysql: unspecified DoS related to Server Optimizer (CPU July 2013)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0 · 4.0 Medium EPSS 3.0% KEV · Not listed

Vendors

Canonical Debian Mariadb and 4 more

Products

Ubuntu Linux Debian Linux Mariadb and 6 more

CVE-2013-3805

mysql: unspecified DoS related to Prepared Statements (CPU July 2013)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Prepared Statements.

CVSS 2.0 · 4.0 Medium EPSS 2.4% KEV · Not listed

Vendors

Mariadb Opensuse Oracle and 1 more

Products

Mariadb Opensuse Mysql and 4 more

CVE-2013-3808

mysql: unspecified DoS related to Server Options (CPU July 2013)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Options.

CVSS 2.0 · 4.0 Medium EPSS 2.9% KEV · Not listed

Vendors

Mariadb Opensuse Oracle and 2 more

Products

Mariadb Opensuse Mysql and 4 more

CVE-2013-3809

mysql: unspecified integrity issue related to audit log (CPU July 2013)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Canonical Mariadb Opensuse and 2 more

Products

Ubuntu Linux Mariadb Opensuse and 5 more

CVE-2013-3812

mysql: unspecified DoS related to Server Replication (CPU July 2013)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Replication.

CVSS 2.0 · 3.5 Low EPSS 2.8% KEV · Not listed

Vendors

Canonical Debian Mariadb and 3 more

Products

Ubuntu Linux Debian Linux Mariadb and 6 more

CVE-2013-4002

OpenJDK: XML parsing Denial of Service (JAXP, 8017298)

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.

CVSS 2.0 · 7.1 High EPSS 24.7% KEV · Not listed

Vendors

Apache Canonical Hp and 7 more

Products

Xerces2 Java Ubuntu Linux Hp-ux and 28 more

CVE-2013-5610

Mozilla: Miscellaneous memory safety hazards (rv:26.0) (MFSA 2013-104)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 6.5% KEV · Not listed

Vendors

Canonical Fedoraproject Mozilla and 3 more

Products

Ubuntu Linux Fedora Firefox and 6 more

CVE-2013-5611

Mozilla: Application Installation doorhanger persists on navigation (MFSA 2013-105)

Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.

CVSS 2.0 · 5.8 Medium EPSS 2.1% KEV · Not listed

Vendors

Canonical Fedoraproject Mozilla and 4 more

Products

Ubuntu Linux Fedora Firefox and 6 more

CVE-2013-5612

Mozilla: Character encoding cross-origin XSS attack (MFSA 2013-106)

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header.

CVSS 2.0 · 4.3 Medium EPSS 3.4% KEV · Not listed

Vendors

Canonical Fedoraproject Mozilla and 4 more

Products

Ubuntu Linux Fedora Firefox and 14 more

CVE-2013-5614

Mozilla: Sandbox restrictions not applied to nested object elements (MFSA 2013-107)

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.

CVSS 2.0 · 4.3 Medium EPSS 2.4% KEV · Not listed

Vendors

Canonical Fedoraproject Mozilla and 4 more

Products

Ubuntu Linux Fedora Firefox and 14 more

CVE-2013-5619

Mozilla: Potential overflow in JavaScript binary search algorithms (MFSA 2013-110)

Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.

CVSS 2.0 · 7.5 High EPSS 3.7% KEV · Not listed

Vendors

Canonical Fedoraproject Mozilla and 3 more

Products

Ubuntu Linux Fedora Firefox and 6 more

CVE-2017-18017

kernel: netfilter: use-after-free in tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

CVSS 3.1 · 9.8 Critical EPSS 52.8% KEV · Not listed

Vendors

Arista Canonical Debian and 6 more

Products

Eos Ubuntu Linux Debian Linux and 30 more

CVE-2022-27239

cifs-utils: stack-based buffer overflow mount.cifs may lead to local privilege escalation to root

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Debian Fedoraproject Hp and 3 more

Products

Debian Linux Fedora Helion Openstack and 17 more

CVE-2020-8018

User owned /etc in SLES15-SP1-CHOST-BYOS

A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS version 1.0.1 and prior versions; SLES15-SP1-CHOST-BYOS versions prior to 1.0.3 and prior versions;

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Suse

Products

Linux Enterprise Desktop

CVE-2020-8017

race condition on texlive-filesystem cron job allows for the deletion of unintended files

A Race Condition Enabling Link Following vulnerability in the cron job shipped with texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users in group mktex to delete arbitrary files on the system This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Opensuse Suse

Products

Leap Texlive-filesystem Linux Enterprise Desktop and 1 more

CVE-2020-8016

race condition in the packaging of texlive-filesysten

A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Opensuse Suse

Products

Leap Texlive-filesystem Linux Enterprise Desktop and 1 more