CVE-2016-5627

CVE-2016-5627 describes an unspecified vulnerability in Oracle MySQL affecting versions 5.6.31 and earlier and 5.7.13 and earlier. The flaw allows remote authenticated users to affect availability via vectors related to the InnoDB storage engine. The provided connected documents confirm the affec...

Oracle MySQL Server 5.6 <= 5.6.31 / 5.7 <= 5.7.13 Security Update (cpuoct2016) - Linux

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MySQL 5.6.x < 5.6.32 Multiple Vulnerabilities

The version of MySQL running on the remote host is 5.6.x prior to 5.6.32. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the DML subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. CVE-2016-5612 - Multiple...

MySQL 5.7.x < 5.7.14 Multiple Vulnerabilities

The version of MySQL running on the remote host is 5.7.x prior to 5.7.14. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified flaws exist in the InnoDB subcomponent that allow an authenticated, remote attacker to cause a denial of service condition. CVE-2016-3495,...

MySQL 5.7.x < 5.7.14 Multiple Vulnerabilities

The version of MySQL running on the remote host is 5.7.x prior to 5.7.14. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified flaws exist in the InnoDB subcomponent that allow an authenticated, remote attacker to cause a denial of service condition. CVE-2016-3495,...

sensacine.com XSS vulnerability

Vulnerable URL: http://www.sensacine.com/cines/busqueda/?q=x";alert/XSSPOSED/// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5627 Google Pagerank| 6 VIP website status:| Yes Chec...

CVE-2014-5627

The CVE-2014-5627 entry concerns the Ice Age Village Android app (com.gameloft.android.ANMP.GloftIAHM) version 2.8.0m, where SSL servers are not verified due to missing X.509 certificate verification. This allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted ...

CVE-2012-5627

CVE-2012-5627 affects Oracle MySQL and MariaDB where the salt is not changed during multiple executions of the CHANGE_USER command within the same MySQL/MariaDB connection. This allows remote authenticated users to more easily brute-force passwords. Affected versions include MySQL/MariaDB: 5.5.x ...

CVE-2013-5627

...

CVE-2013-5627

CVE-2013-5627 is rejected; this CVE ID is not used and does not represent an active vulnerability entry.

Mandriva Linux Security Advisory : mariadb (MDVSA-2013:102)

Updated mariadb packages includes fixes for the following security vulnerabilities : Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote attackers to affect integrity and availability, related to MySQL Client CVE-2012-3147. Unspecified...

Security fix for the ALT Linux 8 package mariadb version April

April 1, 2013 Michael Shigorin 5.5.30-alt10 - New version - NB: 5.5.29 had important security fixes, including: + A buffer overflow that can cause a server crash or arbitrary code execution a variant of CVE-2012-5611 + CVE-2012-5627 fast password brute-forcing using the "change user" +...

MariaDB 5.2.0 < 5.2.14 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.2.14. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.2.14 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users t...

Oracle MySQL/MariaDB 不安全Salt生成安全绕过漏洞(CVE-2012-5627)

Bugtraq ID:56837 CVE ID:CVE-2012-5627 MySQL是一款开源关系型数据库管理系统。MariaDB是一个采用Maria存储引擎的MySQL分支版本。 MySQL处理密码salt值存在漏洞，当用户登录MySQL时，会生成Salt值用于防止密码猜测攻击。此salt值在会话开始时创建并用于整个会话，如果通过验证的攻击者使用MySQL "changeuser"命令尝试以其他用户登录，由于Salt已知，可导致密码猜测更有效率。 0 MySQL 5.5.19及其他版本 MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66 MariaDB...

CVE-2012-5627

creationtimestamp| type| source ---|---|--- 2012-12-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38109 2026-06-08 02:37:18+00:00| seen| https://gist.github.com/GustavoLopreto/2028a93a87ebc86d6cb797b2b5907f4d...

CVE-2008-5627

The connected data confirms a concrete SQL injection vulnerability in Active Trade 2, specifically in account.asp, exploitable via the username (Email) or password parameters. This allows remote attackers to execute arbitrary SQL commands against the underlying database. The CVE entry (CVE-2008-5...

CVE-2008-5627

creationtimestamp| type| source ---|---|--- 2008-11-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7282...

SuSE 10 Security Update : OpenSSH (ZYPP Patch Number 5627)

Due to a faulty signal handler repeated login attempts could exhaust the maximum allowed connections and prevent further logins. CVE-2008-4109 A problem where utmp entries where not deleted when users logged out was also fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

CVE-2007-5627

The set of connected documents confirms CVE-2007-5627 affects SocketMail 2.2.8. The vulnerability is a PHP remote file inclusion in content/fnc-readmail3.php, exploitable via a URL in the __SOCKETMAIL_ROOT parameter, allowing an attacker to execute arbitrary PHP code. This is the stated impact in...

CVE-2006-5627

Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the adminfolderpath parameter to 1 headerscripts.php, 2 footerhome.php, and 3 footermain.php in admin/include/; 4 photogallery/headerscripts.php; and 5...