sybase kayıtları
sybase üreticisine ait 37 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 2 · %5,4
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-264 Permissions, Privileges, and Access Controls5
- CWE-94 Improper Control of Generation of Code ('Code Injection')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-134 Use of Externally-Controlled Format String1
- CWE-285 Improper Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
37 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2008-0912Kavram kanıtı | Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10sybase · mobilink · CWE-119 | Kritik10,0 | — | %15,6 | 22 Şub 2008 |
43Planlayın | CVE-2005-0441İstismar yok | Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users tsybase · adaptive server enterprise | Kritik10,0 | — | %8,5 | 22 Ara 2004 |
42Planlayın | CVE-2002-2250İstismar yok | Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter sybase · adaptive server · CWE-119 | Kritik10,0 | — | %7,7 | 31 Ara 2002 |
41Planlayın | CVE-2013-6245İstismar yok | Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3.sybase · adaptive server enterprise | Kritik10,0 | — | %4,7 | 23 Eki 2013 |
41Planlayın | CVE-2011-0496İstismar yok | Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), asybase · appeon for powerbuilder | Kritik10,0 | — | %4,5 | 20 Oca 2011 |
41Planlayın | CVE-2011-2475İstismar yok | Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Sybsybase · onebridge mobile data suite · CWE-134 | Kritik10,0 | — | %3,7 | 9 Haz 2011 |
41Planlayın | CVE-2006-3667İstismar yok | Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack vesybase · financial fusion consumer banking solution | Kritik10,0 | — | %1,7 | 18 Tem 2006 |
40Planlayın | CVE-2005-2297Silahlaştırılmış | Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary codsybase · easerver | Orta4,6 | — | %74,2 | 19 Tem 2005 |
39İzleyin | CVE-2011-2474Silahlaştırılmış | Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary fisybase · easerver · CWE-22 | Orta5,0 | — | %63,6 | 9 Haz 2011 |
39İzleyin | CVE-2016-7402İstismar yok | SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system adminisybase · adaptive server enterprise · CWE-264 | Kritik9,8 | — | %1,1 | 3 Kas 2016 |
37İzleyin | CVE-2013-6866İstismar yok | SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows sybase · adaptive server enterprise · CWE-94 | Kritik9,0 | — | %3,1 | 23 Kas 2013 |
37İzleyin | CVE-2013-6865İstismar yok | SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 sybase · adaptive server enterprise · CWE-94 | Kritik9,0 | — | %3,1 | 23 Kas 2013 |
37İzleyin | CVE-2013-6863İstismar yok | SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 sybase · adaptive server enterprise · CWE-264 | Kritik9,0 | — | %1,9 | 23 Kas 2013 |
34İzleyin | CVE-2013-6859İstismar yok | SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3.sybase · adaptive server enterprise · CWE-287 | Yüksek8,5 | — | %1,6 | 23 Kas 2013 |
32İzleyin | CVE-2011-0497İstismar yok | Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), asybase · appeon for powerbuilder · CWE-22 | Yüksek7,8 | — | %2,2 | 20 Oca 2011 |
31İzleyin | CVE-2017-5371İstismar yok | Odata Server in SAP Adaptive Server Enterprise (ASE) 16 allows remote attackers to cause a denial of service (process crash) via a series ofsybase · adaptive server enterprise · CWE-20 | Yüksek7,5 | — | %3,8 | 23 Oca 2017 |
31İzleyin | CVE-2014-6284İstismar yok | SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and responssybase · adaptive server enterprise · CWE-264 | Yüksek7,5 | — | %1,8 | 8 Haz 2015 |
31İzleyin | CVE-2013-6862İstismar yok | Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15sybase · adaptive server enterprise | Yüksek7,8 | — | %1,3 | 23 Kas 2013 |
31İzleyin | CVE-2013-6868İstismar yok | SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 sybase · adaptive server enterprise · CWE-200 | Yüksek7,8 | — | %1,1 | 23 Kas 2013 |
30İzleyin | CVE-2013-7245İstismar yok | The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database dusybase · adaptive server enterprise · CWE-285 | Yüksek7,5 | — | %1,4 | 24 Nis 2018 |
30İzleyin | CVE-2015-1310İstismar yok | SQL injection vulnerability in SAP Adaptive Server Enterprise (Sybase ASE) allows remote attackers to execute arbitrary SQL commands via unssybase · adaptive server enterprise · CWE-89 | Yüksek7,5 | — | %1,2 | 22 Oca 2015 |
28İzleyin | CVE-2013-6867İstismar yok | Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to caussybase · adaptive server enterprise | Yüksek7,1 | — | %1,5 | 23 Kas 2013 |
27İzleyin | CVE-2013-6860İstismar yok | Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15sybase · adaptive server enterprise | Orta6,8 | — | %1,3 | 23 Kas 2013 |
26İzleyin | CVE-2014-6283İstismar yok | SAP Adaptive Server Enterprise (ASE) 15.7 before SP122 or SP63, 15.5 before ESD#5.4, and 15.0.3 before ESD#4.4 does not properly restrict acsybase · adaptive server enterprise · CWE-264 | Orta6,5 | — | %1,1 | 17 Eki 2014 |
26İzleyin | CVE-2011-5078İstismar yok | The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin sybase · m-business anywhere · CWE-264 | Orta6,5 | — | %1,0 | 8 Şub 2012 |
- CVE-2008-091245Planlayın
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10
KritikCVSS 10,0Kavram kanıtıEPSS %16sybase · mobilink22 Şub 2008
- CVE-2005-044143Planlayın
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users t
KritikCVSS 10,0İstismar yokEPSS %9sybase · adaptive server enterprise22 Ara 2004
- CVE-2002-225042Planlayın
Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter
KritikCVSS 10,0İstismar yokEPSS %8sybase · adaptive server31 Ara 2002
- CVE-2013-624541Planlayın
Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3.
KritikCVSS 10,0İstismar yokEPSS %5sybase · adaptive server enterprise23 Eki 2013
- CVE-2011-049641Planlayın
Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), a
KritikCVSS 10,0İstismar yokEPSS %5sybase · appeon for powerbuilder20 Oca 2011
- CVE-2011-247541Planlayın
Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Syb
KritikCVSS 10,0İstismar yokEPSS %4sybase · onebridge mobile data suite9 Haz 2011
- CVE-2006-366741Planlayın
Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack ve
KritikCVSS 10,0İstismar yokEPSS %2sybase · financial fusion consumer banking solution18 Tem 2006
- CVE-2005-229740Planlayın
Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary cod
OrtaCVSS 4,6SilahlaştırılmışEPSS %74sybase · easerver19 Tem 2005
- CVE-2011-247439İzleyin
Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary fi
OrtaCVSS 5,0SilahlaştırılmışEPSS %64sybase · easerver9 Haz 2011
- CVE-2016-740239İzleyin
SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system admini
KritikCVSS 9,8İstismar yokEPSS %1sybase · adaptive server enterprise3 Kas 2016
- CVE-2013-686637İzleyin
SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows
KritikCVSS 9,0İstismar yokEPSS %3sybase · adaptive server enterprise23 Kas 2013
- CVE-2013-686537İzleyin
SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100
KritikCVSS 9,0İstismar yokEPSS %3sybase · adaptive server enterprise23 Kas 2013
- CVE-2013-686337İzleyin
SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100
KritikCVSS 9,0İstismar yokEPSS %2sybase · adaptive server enterprise23 Kas 2013
- CVE-2013-685934İzleyin
SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3.
YüksekCVSS 8,5İstismar yokEPSS %2sybase · adaptive server enterprise23 Kas 2013
- CVE-2011-049732İzleyin
Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), a
YüksekCVSS 7,8İstismar yokEPSS %2sybase · appeon for powerbuilder20 Oca 2011
- CVE-2017-537131İzleyin
Odata Server in SAP Adaptive Server Enterprise (ASE) 16 allows remote attackers to cause a denial of service (process crash) via a series of
YüksekCVSS 7,5İstismar yokEPSS %4sybase · adaptive server enterprise23 Oca 2017
- CVE-2014-628431İzleyin
SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and respons
YüksekCVSS 7,5İstismar yokEPSS %2sybase · adaptive server enterprise8 Haz 2015
- CVE-2013-686231İzleyin
Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15
YüksekCVSS 7,8İstismar yokEPSS %1sybase · adaptive server enterprise23 Kas 2013
- CVE-2013-686831İzleyin
SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100
YüksekCVSS 7,8İstismar yokEPSS %1sybase · adaptive server enterprise23 Kas 2013
- CVE-2013-724530İzleyin
The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database du
YüksekCVSS 7,5İstismar yokEPSS %1sybase · adaptive server enterprise24 Nis 2018
- CVE-2015-131030İzleyin
SQL injection vulnerability in SAP Adaptive Server Enterprise (Sybase ASE) allows remote attackers to execute arbitrary SQL commands via uns
YüksekCVSS 7,5İstismar yokEPSS %1sybase · adaptive server enterprise22 Oca 2015
- CVE-2013-686728İzleyin
Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to caus
YüksekCVSS 7,1İstismar yokEPSS %2sybase · adaptive server enterprise23 Kas 2013
- CVE-2013-686027İzleyin
Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15
OrtaCVSS 6,8İstismar yokEPSS %1sybase · adaptive server enterprise23 Kas 2013
- CVE-2014-628326İzleyin
SAP Adaptive Server Enterprise (ASE) 15.7 before SP122 or SP63, 15.5 before ESD#5.4, and 15.0.3 before ESD#4.4 does not properly restrict ac
OrtaCVSS 6,5İstismar yokEPSS %1sybase · adaptive server enterprise17 Eki 2014
- CVE-2011-507826İzleyin
The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin
OrtaCVSS 6,5İstismar yokEPSS %1sybase · m-business anywhere8 Şub 2012