MariaDB log_statement_ex DoS

The vulnerability of the logstatementex method in the MariaDB database management system’s plugin/serveraudit/serveraudit.c file is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

mariadb: DoS due to improper locking due to unreleased lock in plugin/server_audit/server_audit.c

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/serveraudit/serveraudit.c method logstatementex, the held lock lockbigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock...

DEBIAN-CVE-2022-31624

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/serveraudit/serveraudit.c method logstatementex, the held lock lockbigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock...

GHSA-QRH2-MH97-PW8P CSRF vulnerability in Jenkins Audit to Database Plugin

A cross-site request forgery vulnerability in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpldoTestJdbcConnection form validation method allows attackers to initiate a connection to an attacker-specified server...

mariadb: DoS due to improper locking due to unreleased lock in plugin/server_audit/server_audit.c

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/serveraudit/serveraudit.c method logstatementex, the held lock lockbigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock...

CVE-2021-24901

The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24901

The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress SEO Audit Plugin – WP Site Auditor plugin <= 1.2.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SEO Audit Plugin – WP Site Auditor plugin versions = 1.2.4. Solution Update the WordPress SEO Audit Plugin – WP Site Auditor plugin to the latest available version at least 1.2.5...

WordPress SEO Audit Plugin – WP Site Auditor plugin <= 1.2.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress SEO Audit Plugin – WP Site Auditor plugin versions = 1.2.4. Solution Update the WordPress SEO Audit Plugin – WP Site Auditor plugin to the latest available version at least 1.2.5...

WordPress Security Audit plugin <= 1.0.0 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Shweta Mahajan in WordPress Security Audit plugin versions = 1.0.0. Solution Deactivate and delete. This plugin has been closed as of November 15, 2021 and is not available for download. Reason: Security Issue...

UBUNTU-CVE-2021-2162

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Audit Plug-in. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQ...

CVE-2021-2162

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Audit Plug-in. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQ...

Oracle MySQL input validation vulnerability

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Audit Plug-in component of Oracle MySQL Server 5.7.33, 8.0.23 and earlier versions. An attacker could exploit the vulnerability to affect the integrity...

org.sonatype.nexus.assemblies:nexus-base-feature (>=3.4.0-02, <=3.21.1-01), org.sonatype.nexus.assemblies:nexus-base-template (>=3.4.0-02, <=3.21.1-01) +33 more potentially affected by CVE-2020-10199 via org.sonatype.nexus:nexus-extdirect (>=3.4.0-02, <=3.21.1-01)

org.sonatype.nexus:nexus-extdirect MAVEN version =3.4.0-02, =3.4.0-02, =3.4.0-02, =3.21.0-01, =3.12.0-01, =3.4.0-02, =3.12.0-01, =3.4.0-02, =3.17.0-01, =0.0.1, =0.0.2, =0.0.3, =0.0.4, =0.0.13, =1.0.3 and more Source cves: CVE-2020-10199 Source advisory:...

Oracle MySQL Audit Plugin Data Access

The vulnerability of the Server component of the Oracle MySQL Server database management system’s Audit Plugin is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using the MyS...

Oracle MySQL Server Unauthorized Access Vulnerability (CNVD-2020-04839)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. A security vulnerability exists in the Server: Audit Plugin component of Oracle MySQL Server 5.7.28, 8.0.18, and earlier versions. An attacker can exploit this vulnerability to cause...

UBUNTU-CVE-2020-2572

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Audit Plugin. Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQ...

CVE-2020-2572

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Audit Plugin. Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQ...

CVE-2020-2572: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Audit Plugin. Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQ...

PT-2020-1500

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.7.28 and prior Oracle MySQL Server versions 8.0.18 and prior Description The issue is related to insufficient access control in the Server: Audit Plugin component of Oracle MySQL Server. It allows a high-privileg...