Lucene search
K

737 matches found

CNVD
CNVD
added 2021/05/21 12:0 a.m.7 views

Unspecified Vulnerability in SOURCEFORGE Adminer

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. Provides database management in a single PHP file. A security vulnerability exists in Adminer versions 4.6.1 through 4.8.0, which stems from Adminer's use of the pdo extension to communicate with the database, and...

7.5CVSS6.6AI score0.09572EPSS
Exploits1References1
Prion
Prion
added 2021/05/19 10:15 p.m.20 views

Cross site scripting

Adminer is open-source database management software. A cross-site scripting vulnerability in Adminer versions 4.6.1 to 4.8.0 affects users of MySQL, MariaDB, PgSQL and SQLite. XSS is in most cases prevented by strict CSP in all modern browsers. The only exception is when Adminer is using a pdo...

4.3CVSS5.9AI score0.09572EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2021/05/19 9:35 p.m.174 views

CVE-2021-29625

CVE-2021-29625 affects Adminer 4.6.1–4.8.0 when using a pdo_ extension to communicate with MySQL/MariaDB/PgSQL/SQLite, in browsers without CSP. The underlying issue is cross-site scripting (XSS) in Adminer’s UI, mitigated in environments with CSP or when native PHP extensions (e.g., mysqli) are e...

7.5CVSS5.9AI score0.09572EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2021/05/19 9:35 p.m.25 views

CVE-2021-29625

Adminer is open-source database management software. A cross-site scripting vulnerability in Adminer versions 4.6.1 to 4.8.0 affects users of MySQL, MariaDB, PgSQL and SQLite. XSS is in most cases prevented by strict CSP in all modern browsers. The only exception is when Adminer is using a pdo...

7.5CVSS6.2AI score0.09572EPSS
Exploits1
OSV
OSV
added 2021/05/18 6:17 a.m.9 views

ALEA-2021:1869 new module: postgresql:13

PostgreSQL is an advanced object-relational database management system DBMS. This enhancement update adds the postgresql:13 module to AlmaLinux BZ1855776 For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.7AI score
Exploits0References1
CNNVD
CNNVD
added 2021/05/10 12:0 a.m.2 views

HPE IlO Amplifier Pack 跨站脚本漏洞

HPE IlO Amplifier Pack is a database management software for use in clustered environments from HPE, USA. The software supports Gen8, Gen9 and Gen10 Hewlett Packard Enterprise automatic update of firmware, drivers, support for manual or automatic recovery of firmware damage to the system, maximiz...

9.8CVSS7AI score0.0443EPSS
Exploits0References1
CNVD
CNVD
added 2021/03/28 12:0 a.m.2 views

Unauthorized Access Vulnerability in phpMyAdmin

phpMyAdmin is a free, web-based MySQL database management tool from the Phpmyadmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. An unauthorized access vulnerability exists in phpMyAdmin,...

7.3AI score
Exploits0
OSV
OSV
added 2021/03/11 7:24 p.m.5 views

SUSE-SU-2021:0770-1 Security update for libsolv, libzypp, yast2-installation, zypper

This update for libsolv, libzypp, yast2-installation, zypper fixes the following issues: Update zypper to version 1.14.43: - doc: give more details about creating versioned package locks bsc1181622 - man: Document synonymously used patch categories bsc1179847 - Fix source-download commnds help...

4CVSS3.9AI score0.00337EPSS
Exploits0References18
OpenVAS
OpenVAS
added 2021/02/26 12:0 a.m.8 views

Fedora: Security Advisory for postgresql (FEDORA-2021-3db6876545)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
OSV
OSV
added 2021/02/12 10:37 a.m.6 views

SUSE-SU-2021:0448-1 Security update for SUSE Manager Server 4.0

This update fixes the following issues: cpu-mitigations-formula: - Handle unsupported target systems gracefully bsc1179273 - add mitigations for Xen hypervisor nutch-core: - Fix XXE injection in DmozParser CVE-2021-23901 bsc1181356 smdba: - Do not remove the database if there is no backup and dea...

9.1CVSS9.5AI score0.04359EPSS
Exploits0References30
OSV
OSV
added 2021/02/11 9:15 p.m.35 views

CVE-2021-21311

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers e.g. adminer.php are affected. This is fixed in version 4.7.9...

7.2CVSS6.9AI score0.90461EPSS
Exploits3References6
UbuntuCve
UbuntuCve
added 2021/02/11 9:15 p.m.24 views

CVE-2021-21311

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers e.g. adminer.php are affected. This is fixed in version 4.7.9...

7.2CVSS7.2AI score0.90461EPSS
Exploits3References8
Prion
Prion
added 2021/02/11 9:15 p.m.25 views

Server side request forgery (ssrf)

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers e.g. adminer.php are affected. This is fixed in version 4.7.9...

6.4CVSS6.8AI score0.90461EPSS
Exploits3References5Affected Software2
CVE
CVE
added 2021/02/11 8:55 p.m.235 views

CVE-2021-21311

Adminer CVE-2021-21311 is a server-side request forgery (SSRF) flaw affecting Adminer versions before 4.7.9, especially builds bundling all drivers (e.g., adminer.php). The issue arises from error-message handling that can expose sensitive information, enabling an attacker to potentially access i...

7.2CVSS6.8AI score0.90461EPSS
In wildExploits3References6Affected Software1
Debian CVE
Debian CVE
added 2021/02/11 8:55 p.m.73 views

CVE-2021-21311

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers e.g. adminer.php are affected. This is fixed in version 4.7.9...

7.2CVSS7.4AI score0.90461EPSS
Exploits3
CNNVD
CNNVD
added 2021/02/11 12:0 a.m.6 views

SOURCEFORGE Adminer Code Issue Vulnerability

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. It provides database management in a single PHP file. A code issue vulnerability exists in SOURCEFORGE Adminer that arises from improper design or implementation during code development of a web-based system or product...

7.2CVSS7.3AI score0.90461EPSS
Exploits3References8
RedHat Linux
RedHat Linux
added 2021/01/18 10:2 a.m.84 views

Important: Red Hat Security Advisory: postgresql:10 security update

An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

8.8CVSS6.7AI score0.4644EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/12/22 8:55 a.m.294 views

Important: Red Hat Security Advisory: postgresql:9.6 security update

An update for the postgresql:9.6 module is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

8.8CVSS7AI score0.4644EPSS
Exploits0References8
Rockylinux
Rockylinux
added 2020/12/17 3:30 p.m.33 views

postgresql:12 security update

An update is available for pgaudit, postgres-decoderbufs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PostgreSQL is an advanced object-relational database...

8.8CVSS8.3AI score0.4644EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.4 views

Vulnerability of the MySQL Server component of the database management system: This component allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.8CVSS6.5AI score0.02157EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder