SQL Injection

github.com/hashicorp/vault is vulnerable to SQL Injection. The vulnerability exists in mssql.go due to improper validation of parameters such as schema, database, and table which allows an attacker to inject and execute arbitrary sql queries...

AlmaLinux 8 : postgresql:13 (ALSA-2023:1576)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:1576 advisory. postgresql: Extension scripts replace objects not belonging to the extension. CVE-2022-2625 postgresql: Client memory disclosure when connecting with...

NVIDIA GPU Display Driver for Linux security vulnerabilities

NVIDIA GPU Display Driver for Linux is a driver from NVIDIA Corporation that is used for interactive support of graphics card display modules on Linux systems. A security vulnerability exists in the NVIDIA GPU Display Driver for Linux version, which stems from a problem with the kernel schema lay...

NVIDIA GPU Display Driver security vulnerabilities

NVIDIA GPU Display Driver is a driver from NVIDIA Corporation that is used for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver, which stems from a problem with the kernel schema layer driver that could lead to...

Spring Framework security vulnerabilities

Spring Framework is the U.S. Spring team of a set of open source Java, JavaEE application framework. The framework helps developers build high-quality applications . A security vulnerability exists in Spring Framework versions 6.0.0 through 6.0.6 and 5.3.0 through 5.3.25, which stems from a schem...

libxml2:schema: Global-buffer-overflow in xmlParseEntityDecl

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5708857413599232 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: schema Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

CBL Mariner 2.0 Security Update: helm (CVE-2022-23526)

The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-23526 advisory. - Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject ...

libxml2:schema: Global-buffer-overflow in xmlParseContentInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6705948399108096 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: schema Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

libxml2:schema: Global-buffer-overflow in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=6314139380482048 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: schema Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

libxml2:schema: Global-buffer-overflow in xmlParseContentInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5073354691575808 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: schema Job Type: libfuzzerasani386libxml2 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address:...

Fortinet FortiWeb and FortiRecorder Arbitrary File Read Vulnerability

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. and FortiRecorder are vulnerable to arbitrar...

pg_ivm code issue vulnerabilities

pgivm is a library in the SRA OSS open source . IVM Incremental View Maintenance implementation as a PostgreSQL extension. A security vulnerability exists in pgivm versions prior to 1.5.1, which stems from the presence of an uncontrolled search path element vulnerability that can be exploited by ...

Fortinet FortiWeb has an unspecified vulnerability (CNVD-2023-18296)

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. A security vulnerability exists that could b...

K14907: MySQL Server vulnerability CVE-2012-3163

Security Advisory Description Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema. CVE-2012-31...

K16385: Multiple MySQL vulnerabilities

Security Advisory Description CVE-2013-5894 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB. CVE-2013-5881 Unspecified vulnerability in the MySQL Server...

K14342624: MySQL vulnerability CVE-2016-5633

Security Advisory Description Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Performance Schema, a different vulnerability than CVE-2016-8290. CVE-2016-5633 Impact There is no impact; F5 products are...

Fortinet FortiWeb Cross-Site Scripting Vulnerability (CNVD-2023-18299)

Fortinet FortiWeb is a Web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures Web applications and protects sensitive database content. A cross-site scripting vulnerability exists...

Fortinet FortiWeb Resource Management Error Vulnerability

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. A resource management error vulnerability...

Schema - All In One Schema Rich Snippets < 1.6.6 - Multiple CSRF

The plugin does not properly validate a user intended to do an action, which they could have done using nonce checks. This makes it possible for attackers to conduct CSRF attacks against an unsuspecting administrator, tricking their browser into editing some of the plugin's settings...

SUSE CVE-2006-7217

Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode...