Lucene search
+L

384 matches found

OSV
OSV
added 2022/02/06 12:00 a.m.28 views

DLA-2912-1 libphp-adodb - security update

Bulletin has no description...

9.1CVSS9.1AI score0.0217EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/02/06 12:00 a.m.38 views

Debian DLA-2912-1 : libphp-adodb - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2912 advisory. It was found that in libphp-adodb, a PHP database abstraction layer library, an attacker can inject values into the PostgreSQL connection string by bypassing adodbaddslashe...

9.1CVSS8AI score0.0217EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.18 views

Mageia: Security Advisory (MGASA-2016-0363)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.02984EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/01/27 3:23 p.m.37 views

Authentication Bypass in ADOdb/ADOdb

Impact An attacker can inject values into a PostgreSQL connection string by providing a parameter surrounded by single quotes. Depending on how the library is used in the client software, this may allow an attacker to bypass the login process, gain access to the server's IP address, etc. Patches...

9.1CVSS8.7AI score0.0217EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2022/01/27 3:23 p.m.31 views

GHSA-65MJ-7C86-79JF Authentication Bypass in ADOdb/ADOdb

Impact An attacker can inject values into a PostgreSQL connection string by providing a parameter surrounded by single quotes. Depending on how the library is used in the client software, this may allow an attacker to bypass the login process, gain access to the server's IP address, etc. Patches...

9.1CVSS9.1AI score0.0217EPSS
SaveExploits1References9
Veracode
Veracode
added 2022/01/26 4:18 a.m.24 views

Authentication Bypass

adodb/adodb-php is vulnerable to authentication bypass. The vulnerability exists in the adodbaddslashes function of adodb-postgres64.inc.php, allowing an attacker to inject values into the PostgreSQL connection by providing a parameter surrounded by the single quotes...

9.1CVSS3.9AI score0.0217EPSS
SaveExploits1References7Affected Software2
NVD
NVD
added 2022/01/25 3:15 p.m.20 views

CVE-2021-3850

Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...

9.1CVSS0.0217EPSS
SaveExploits1References4
OSV
OSV
added 2022/01/25 3:15 p.m.19 views

CVE-2021-3850

Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...

9.1CVSS7.1AI score
SaveExploits0References4
OSV
OSV
added 2022/01/25 3:15 p.m.4 views

DEBIAN-CVE-2021-3850

Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...

9.1CVSS8.3AI score0.0217EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2022/01/25 3:15 p.m.27 views

CVE-2021-3850

Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...

9.1CVSS7.2AI score0.0217EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2022/01/25 3:15 p.m.12 views

CVE-2021-3850

Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...

9.1CVSS7.3AI score0.0217EPSS
SaveExploits1References5
OSV
OSV
added 2022/01/25 3:15 p.m.32 views

UBUNTU-CVE-2021-3850

Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...

9.1CVSS7.3AI score0.0217EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2022/01/25 2:20 p.m.48 views

CVE-2021-3850 Authentication Bypass by Primary Weakness in adodb/adodb

Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...

9.1CVSS9.4AI score0.0217EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2022/01/25 2:20 p.m.94 views

CVE-2021-3850

Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21...

9.1CVSS9.3AI score0.0217EPSS
SaveExploits1
CVE
CVE
added 2022/01/25 2:20 p.m.137 views

CVE-2021-3850

CVE-2021-3850 affects libphp-adodb, a PHP database abstraction layer used with adodb/adodb. The flaw allows injection into the PostgreSQL connection string by bypassing adodb_addslashes(), potentially enabling authentication bypass or exposing server information, depending on usage. Patches exist...

9.1CVSS9.2AI score0.0217EPSS
SaveExploits1References4Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/01/25 12:00 a.m.35 views

Authentication Bypass by Primary Weakness

Authentication Bypass by Primary Weakness exists in adodb/adodb...

9.1CVSS3AI score0.0217EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2022/01/25 12:00 a.m.15 views

ADOdb 授权问题漏洞

ADOdb is a PHP database library that provides a powerful abstraction for performing queries and managing databases. A security vulnerability exists in ADOdb that stems from the lack of an effective trust management mechanism in a networked system or product. An attacker can leverage default or...

9.1CVSS8.2AI score0.0217EPSS
SaveExploits1References10
Zero Day Initiative
Zero Day Initiative
added 2019/07/08 12:00 a.m.36 views

Microsoft Windows ADODB Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within msado15.dll. B...

5CVSS3.3AI score0.05524EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/08 12:00 a.m.39 views

Microsoft Windows ADODB Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within msado15.dll. B...

5CVSS3.3AI score0.05524EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/07/04 12:00 a.m.33 views

Microsoft Windows ADODB Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the library...

5CVSS3.5AI score0.05524EPSS
SaveExploits0References1
Rows per page
Query Builder