MariaDB Buffer Overflow Vulnerability (CNVD-2022-51601)

MariaDB is a free and open source database management system from the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine.MariaDB has a security vulnerability that stems from the discovery of a memory poisoning in the /storage/innobase/handler/handler0alter.cc...

MariaDB Buffer Overflow Vulnerability (CNVD-2022-51592)

MariaDB is a free and open source database management system from the Mariadb Foundation and a branch version of MySQL that uses the Maria storage engine.MariaDB has a security vulnerability that stems from the discovery of a memory poisoning in the /libsanitizer/sanitizercommon/sanitizercommon A...

Important: Red Hat Security Advisory: rh-postgresql10-postgresql security update

An update for rh-postgresql10-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: postgresql:13 security update

An update for the postgresql:13 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RLSA-2022:4771 Important: postgresql security update

PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream version: postgresql 13.7. Security Fixes: postgresql: Autovacuum, REINDEX, and others omit "security restricted operation" sandbox CVE-2022-1552 For more...

ALSA-2022:1830 Moderate: postgresql:10 security update

PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream version: postgresql 10.19. BZ2023231 Security Fixes: postgresql: server processes unencrypted bytes from man-in-the-middle CVE-2021-23214 For more details abo...

Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2022-33994)

Oracle MySQL is an open source relational database management system from Oracle Corporation. MySQL Server is one of the database server components, and an input validation error vulnerability exists in Oracle MySQL Server component: InnoDB version 8.0.28 and earlier. An unauthenticated attacker...

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-31688)

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Server is one of the database server components.MySQL Connectors is one of the drivers for connecting applications that use MySQL. An input validation error vulnerability exists in Oracle MySQL that...

MariaDB my_wildcmp_8bit_impl component memory mis-reference vulnerability

MariaDB is a free and open source database management system from the MariaDB Foundation and a branch version of MySQL that uses the Maria storage engine. a memory misquote vulnerability exists in MariaDB v10.6.3 and lower, which originates in the /strings/ctype-simple.c component my...

MariaDB Denial of Service Vulnerability (CNVD-2022-65004)

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB Server v10.7 and lower, which stems from the inclusion of a global buffer overflow in the component...

Vulnerability of the Server component: DML of the MySQL database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server component: The DML part of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

Damon database management system has a logic flaw vulnerability

Damon Database Management System is a high-performance database management system with fully independent intellectual property rights launched by Damon, or DM for short. Damon Database Management System has a logic flaw vulnerability, which can be exploited by attackers to gain control of the...

Vicidial v2.14-783a - (DB) SQL Injection Web Vulnerability

Document Title: =============== Vicidial v2.14-783a - DB SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2312 Release Date: ============= 2022-02-17 Vulnerability Laboratory ID VL-ID: ====================================...

Code Execution Vulnerability in Damon Database Management System

Wuhan Damon Database Co., Ltd. is a company dedicated to the research, development, sales and service of database management systems and big data platforms, as well as can provide users with full-stack data products and solutions. A code execution vulnerability exists in the Damon Database...

XML Entity Injection Vulnerability in Damon Database Management System

Damon Database Management System is a database management system with completely independent intellectual property rights launched by Damon Company, referred to as DM. There is an XML entity injection vulnerability in Damon Database Management System, which can be exploited by attackers to obtain...

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09138)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An input validation error vulnerability exists in MySQL Cluster, which stems from incorrect input validation by the Cluster: General component in MyS...

PHP Melody 3.0 - (vid) SQL Injection Vulnerability

Exploit Title: PHP Melody 3.0 - 'vid' SQL Injection Vendor Homepage: https://www.phpsugar.com/phpmelody.html Version: v3 Product & Service Introduction: =============================== Upload, import, stream or embed any media. The smart way to manage audio & video. Comes with all the tools you...

Denial of Service Vulnerability in Gbase 8a

GBase 8s is a secure database management system with full intellectual property rights. A denial-of-service vulnerability exists in Gbase 8a, which can be exploited by an attacker to cause the program to crash...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2021-54376)

Oracle MySQL is an open source relational database management system from Oracle Corporation. A denial-of-service vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.25 and earlier versions. An attacker can exploit this vulnerability to cause MySQL Server to hang or...