Lucene search
+L

92 matches found

RedHat Linux
RedHat Linux
•added 2022/07/28 4:06 p.m.•18 views

mariadb: server crash in component arg_comparator::compare_real_fixed

A flaw was found in MariaDB. The component, Argcomparator::comparerealfixed, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

7.5CVSS7.3AI score0.02264EPSS
SaveExploits1References4
Microsoft CVE
Microsoft CVE
•added 2022/04/21 7:00 a.m.•12 views

An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

...

7.5CVSS7.8AI score0.02264EPSS
SaveExploits1
osv_alpine
osv_alpine
•added 2022/04/12 8:15 p.m.•19 views

ALPINE-CVE-2022-27379

An issue in the component Argcomparator::comparerealfixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

7.5CVSS7.8AI score0.02264EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/04/12 8:15 p.m.•12 views

CVE-2022-27379

An issue in the component Argcomparator::comparerealfixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

7.5CVSS7.1AI score0.02264EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2022/04/12 8:15 p.m.•12 views

DEBIAN-CVE-2022-27379

An issue in the component Argcomparator::comparerealfixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

7.5CVSS8AI score0.02264EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2022/04/12 8:15 p.m.•15 views

AZL-9691 CVE-2022-27379 affecting package mariadb for versions less than 10.6.8-1

An issue in the component Argcomparator::comparerealfixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

7.5CVSS7.2AI score0.02264EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/04/12 8:15 p.m.•16 views

UBUNTU-CVE-2022-27379

An issue in the component Argcomparator::comparerealfixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

7.5CVSS7.2AI score0.02264EPSS
SaveExploits1References4
Prion
Prion
•added 2021/10/07 4:15 p.m.•31 views

Design/Logic Flaw

Integria IMS login check uses a loose comparator "==" to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords...

7.5CVSS9.2AI score0.01119EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/10/07 3:10 p.m.•48 views

CVE-2021-3833 Integria IMS incorrect authorization

Integria IMS login check uses a loose comparator "==" to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords...

9.8CVSS9.5AI score0.01119EPSS
SaveExploits0References2
CVE
CVE
•added 2021/10/07 3:10 p.m.•82 views

CVE-2021-3833

CVE-2021-3833 affects Integria IMS where the login check compares MD5(password) using a loose equality (==) instead of a secure comparison. This allows an attacker with a specially formatted password to authenticate as another user, effectively bypassing login checks. The issue is described as en...

9.8CVSS9.5AI score0.01119EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/07 12:00 a.m.•8 views

CVE-2021-3833: Incorrect Comparison

Integria IMS login check uses a loose comparator "==" to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords...

9.8CVSS5.9AI score0.01119EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/08/13 12:00 a.m.•21 views

PT-2021-7500 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.6.2 and below Description: An issue in the component Arg comparator::compare real fixed was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements. The vulnerability is...

10CVSS6.7AI score0.73188EPSS
SaveExploits120References918
Rows per page
Query Builder