CVE-2014-0001: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service crash and possibly execute arbitrary code via a long server version string...

PT-2014-1184

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions prior to 5.5.35 MariaDB versions prior to 5.5.35 Description The issue is related to a buffer overflow in the client/mysql.cc file, which can be exploited by remote database servers. This can cause a denial of service cra...

[ MDVSA-2013:289 ] owncloud

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:289 http://www.mandriva.com/en/support/security/ Package : owncloud Date : December 17, 2013 Affected: Business Server 1.0 Problem Description: Updated owncloud package fixes security vulnerability: Possible...

CVE-2013-6403

The admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to MariaDB...

Design/Logic Flaw

The admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to MariaDB...

CVE-2013-6403

The admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to MariaDB...

CVE-2013-6403

The admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to MariaDB...

CVE-2013-6403

CVE-2013-6403 affects ownCloud up to 5.x, where the admin page could bypass intended access restrictions due to issues related to MariaDB. The description indicates a remote bypass vulnerability in admin functionality for versions prior to 5.0.13. Connected advisories note a vendor-security updat...

CVE-2013-6403: Undefined Security Weakness

The admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to MariaDB...

Mandriva Linux Security Advisory : owncloud (MDVSA-2013:289)

Updated owncloud package fixes security vulnerability : Possible security bypass on admin page under certain circumstances and MariaDB CVE-2013-6403. The owncloud package has been updated to version 5.0.13, fixing this and many other issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Updated owncloud package fixes CVE-2013-6403

Updated owncloud package fixes security vulnerability: Possible security bypass on admin page under certain circumstances and MariaDB CVE-2013-6403. The owncloud package has been updated to version 5.0.13, fixing this and many other issues...

MGASA-2013-0367 Updated owncloud package fixes CVE-2013-6403

Updated owncloud package fixes security vulnerability: Possible security bypass on admin page under certain circumstances and MariaDB CVE-2013-6403. The owncloud package has been updated to version 5.0.13, fixing this and many other issues...

PT-2013-6033

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 5.0.13 Description The issue allows remote attackers to bypass intended access restrictions via unspecified vectors, related to MariaDB. Recommendations For versions prior to 5.0.13, update to version 5.0.13 or later...

Kartoo Search Engine XSS / Remote File Inclusion

================================================================================================================================================================= KARTOO SEARCH ENGINE XSS / PHP allowurlfopen enabled / PHP allowurlinlude enable /Security vulnerability in / Sensitive Files Informati...

MariaDB 'COM_CHANGE_USER' Command Insecure Salt Generation Security Bypass Vulnerability

MariaDB is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb";...

MariaDB Denial Of Service Vulnerability - Windows

MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb";...

CVE-2012-5627

Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the changeuser command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks...

CVE-2012-5627

Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the changeuser command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks...

Command injection

Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the changeuser command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks...

UBUNTU-CVE-2012-5627

Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the changeuser command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks...