Lucene search
+L

108 matches found

OSV
OSV
added 2016/08/31 3:32 p.m.20 views

MGASA-2016-0291 Updated phpmyadmin packages fix security vulnerability

In phpMyAdmin before 4.4.15.8, the decryption of the username/password is vulnerable to a padding oracle attack. The can allow an attacker who has access to a user's browser cookie file to decrypt the username and password. Also, the same initialization vector IV is used to hash the username and...

10CVSS7.9AI score0.0475EPSS
SaveExploits0References29
RedhatCVE
RedhatCVE
added 2015/10/30 10:4 a.m.19 views

CVE-2013-3240

Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a parameter that specifies a crafted export type...

6.5CVSS7.3AI score0.05485EPSS
SaveExploits6References2
Cvelist
Cvelist
added 2014/09/15 2:0 p.m.26 views

CVE-2014-2375 Ecava IntegraXor SCADA Server External Control of File Name or Path

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service disk consumption, via the CSV export feature...

8.3CVSS6.8AI score0.02315EPSS
SaveExploits0References1
NVD
NVD
added 2013/04/26 3:34 a.m.33 views

CVE-2013-3240

Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a parameter that specifies a crafted export type...

6.5CVSS6.8AI score0.05485EPSS
SaveExploits6References2
Prion
Prion
added 2013/04/26 3:34 a.m.25 views

Directory traversal

Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a parameter that specifies a crafted export type...

6.5CVSS7.3AI score0.05485EPSS
SaveExploits6References2Affected Software1
UbuntuCve
UbuntuCve
added 2013/04/26 3:34 a.m.26 views

CVE-2013-3240

Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a parameter that specifies a crafted export type...

6.5CVSS7.4AI score0.05485EPSS
SaveExploits6References2
Fedora
Fedora
added 2012/03/17 11:42 p.m.16 views

[SECURITY] Fedora 16 Update: python-mwlib-0.13.5-1.fc16

mwlib provides a library for parsing MediaWiki articles and converting them to different output formats. mwlib is used by Wikipedia's "Print/export" featu re in order to generate PDF documents from Wikipedia articles...

3.4AI score
SaveExploits0
CVE
CVE
added 2009/02/10 2:0 a.m.71 views

CVE-2009-0501

CVE-2009-0501 affects Moodle’s Calendar Export feature in Moodle 1.8.x before 1.8.8 and 1.9.x before 1.9.4. The root cause is a Calendar Export flaw that allows an attacker to obtain usernames (sensitive information) and perform brute-force attacks on user accounts. Exploitation vectors are not d...

5CVSS7AI score0.01066EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder