Lucene search
+L

8672 matches found

Redos
Redos
added 2022/02/22 12:00 a.m.73 views

ROS-20220217-01

MariaDB database management system vulnerability, related to a formatted string error in the in the implementation of the CONNECT function. Exploitation of the vulnerability could allow an attacker acting remotely, send a specially crafted SQL query containing format string specifiers and execute...

7.8CVSS8.1AI score0.00689EPSS
SaveExploits1
OSV
OSV
added 2022/02/18 8:15 p.m.4 views

DEBIAN-CVE-2022-24051

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS7.8AI score0.00657EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.8 views

CVE-2022-24051

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS6.2AI score0.00657EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2022/02/18 8:15 p.m.5 views

ALPINE-CVE-2022-24051

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS7.7AI score0.00657EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/18 8:15 p.m.29 views

Design/Logic Flaw

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

4.6CVSS7.5AI score0.00657EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2022/02/18 8:15 p.m.10 views

UBUNTU-CVE-2022-24051

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS7.5AI score0.00657EPSS
SaveExploits0References4
OSV
OSV
added 2022/02/18 7:51 p.m.35 views

CVE-2022-24051

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7CVSS7.8AI score
SaveExploits0References8
MariaDBUnix
MariaDBUnix
added 2022/02/18 7:51 p.m.65 views

CVE-2022-24051

Disclaimer: This data contains information about vulnerable...

7.8CVSS7.4AI score0.00657EPSS
SaveExploits0
CVE
CVE
added 2022/02/18 7:51 p.m.412 views

CVE-2022-24051

CVE-2022-24051 corresponds to a MariaDB CONNECT Storage Engine vulnerability described as a Format String Privilege Escalation. The issue stems from inadequate validation of a user-supplied string when it is used as a format specifier during SQL processing, which can allow a local attacker to esc...

7.8CVSS7.7AI score0.00657EPSS
SaveExploits0References6Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/02/16 12:00 a.m.33 views

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied...

7CVSS3.1AI score0.00657EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2022/02/14 12:00 a.m.260 views

Slurp 1.10.2 Format String

Exploit Title: Slurp 1.10.2 - Remote Format String Date: 2022-02-12 Author: Milad Karimi slurp is a freely available, open source NNTP client. It is designed for use on most Unix and Linux operating systems. It may be possible for a remote server to execute code on a vulnerable client. slurp offe...

0.3AI score
SaveExploits0
zdt
zdt
added 2022/02/14 12:00 a.m.258 views

Slurp 1.10.2 Format String Vulnerability

Exploit Title: Slurp 1.10.2 - Remote Format String Date: 2022-02-12 Author: Milad Karimi slurp is a freely available, open source NNTP client. It is designed for use on most Unix and Linux operating systems. It may be possible for a remote server to execute code on a vulnerable client. slurp offe...

7.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:00 a.m.32 views

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied...

7CVSS3.1AI score0.00657EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/02/09 12:00 a.m.5 views

MariaDB 格式化字符串错误漏洞

MariaDB is a free and open source database management system from the MariaDB Mariadb Foundation and a forked version of MySQL with the Maria storage engine. A format string error vulnerability exists in MariaDB due to a format string error in the CONNECT function implementation. A remote user wi...

7.8CVSS8.5AI score0.00657EPSS
SaveExploits0References22
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.21 views

Mageia: Security Advisory (MGASA-2013-0204)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.9CVSS6.7AI score0.07313EPSS
SaveExploits6References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.23 views

Mageia: Security Advisory (MGASA-2013-0332)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.10483EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.24 views

Mageia: Security Advisory (MGASA-2018-0001)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.04551EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.10 views

Mageia: Security Advisory (MGASA-2021-0235)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.02409EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.19 views

Mageia: Security Advisory (MGASA-2014-0520)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.05569EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.27 views

Mageia: Security Advisory (MGASA-2017-0371)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.16219EPSS
SaveExploits2References10
Rows per page
Query Builder