Lucene search
K

14 matches found

Tenable Nessus
Tenable Nessus
added 6 days ago7 views

RockyLinux 10 : galera and mariadb11.8 (RLSA-2026:19021)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:19021 advisory. MariaDB: MariaDB: Remote Code Execution or Denial of Service via JSONSCHEMAVALID function vulnerability CVE-2026-32710 Tenable has extracted the preceding...

9.9CVSS5.9AI score0.00114EPSS
Exploits1References3
OSV
OSV
added 2026/04/27 2:44 p.m.3 views

OPENSUSE-SU-2026:20629-1 Security update for mariadb

This update for mariadb fixes the following issue: - Update to v11.8.6 - CVE-2026-32710: heap-based buffer overflow via JSONSCHEMAVALID can lead to crash or remote code execution bsc1260081...

9.9CVSS6.6AI score0.00114EPSS
Exploits1References2
SUSE Linux
SUSE Linux
added 2026/04/15 2:34 p.m.4 views

Security update for mariadb

This update for mariadb fixes the following issues: Update to version 11.8.6. https://mariadb.com/docs/release-notes/community-server/11.8/11.8.6 https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.6 Security issues fixed: CVE-2026-32710: heap-based buffer overflow via...

8.5CVSS6.7AI score0.00114EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2026/03/24 12:24 a.m.2 views

SUSE CVE-2026-32710

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

8.5CVSS6.1AI score0.00114EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2026/03/20 7:16 p.m.1 views

CVE-2026-32710

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

9.9CVSS5.9AI score0.00114EPSS
Exploits1References2
OSV
OSV
added 2026/03/20 7:16 p.m.1 views

UBUNTU-CVE-2026-32710

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

9.9CVSS6.1AI score0.00114EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/20 6:31 p.m.7 views

CVE-2026-32710

MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSONSCHEMAVALID function. Under certain conditions it might be possible to turn the crash into a remote code execution. These...

8.5CVSS6.1AI score0.00114EPSS
Exploits1References3Affected Software1
SUSE CVE
SUSE CVE
added 2023/10/31 2:29 a.m.1 views

SUSE CVE-2020-15366

An issue was discovered in ajv.validate in Ajv aka Another JSON Schema Validator 6.12.2. A carefully crafted JSON schema could be provided that allows execution of other code by prototype pollution. While untrusted schemas are recommended against, the worst case of an untrusted schema should be a...

5.6CVSS9.5AI score0.00331EPSS
Exploits0References2
OSV
OSV
added 2022/12/22 10:30 p.m.27 views

GO-2022-1166 Denial of service via schema file in helm.sh/helm/v3

Certain JSON schema validation files can cause a Helm Client to panic, leading to a possible denial of service. The chartutil package contains a parser that loads a JSON Schema validation file. For example, the Helm client when rendering a chart will validate its values with the schema file. The...

7.5CVSS6.7AI score0.00068EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2022/12/16 9:36 a.m.36 views

CVE-2022-23526

A flaw was found in Helm, a tool for managing Charts, a pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in thechartutil package that could cause a segmentation violation. The chartutil package contains a parser that loads a JSON Schema...

7.5CVSS1.5AI score0.00068EPSS
Exploits0References5
NVD
NVD
added 2022/12/15 7:15 p.m.16 views

CVE-2022-23526

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in thechartutil package that can cause a segmentation violation. The chartutil package contains a parser that loads a JSON Schema validation file. For example,...

7.5CVSS0.00068EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/12/14 12:0 a.m.17 views

Mageia: Security Advisory (MGASA-2022-0463)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.01262EPSS
Exploits1References4
OSV
OSV
added 2022/12/13 10:9 p.m.6 views

MGASA-2022-0463 Updated nodejs-json-schema packages fix security vulnerability

node-json-schema, JSON Schema validation and specifications, was vulnerable to Improperly Controlled Modification of Object Prototype Attributes. CVE-2021-3918...

9.8CVSS9.4AI score0.01262EPSS
Exploits1References3
Debian
Debian
added 2022/12/06 7:15 p.m.38 views

[SECURITY] [DLA 3228-1] node-json-schema security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3228-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 07, 2022 https://wiki.debian.org/LTS -...

9.8CVSS9.7AI score0.01262EPSS
Exploits1
Rows per page
Query Builder