Lucene search
K

21 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/16 7:48 p.m.2 views

CVE-2026-40899

DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a JDBC parameter blocklist bypass vulnerability in the MySQL datasource configuration. The Mysql class uses Lombok's @Data annotation, which auto-generates a public setter for the...

8.3CVSS5.9AI score0.00015EPSS
Exploits1References3Affected Software1
EUVD
EUVD
added 2026/04/16 7:48 p.m.3 views

EUVD-2026-23293

DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a JDBC parameter blocklist bypass vulnerability in the MySQL datasource configuration. The Mysql class uses Lombok's @Data annotation, which auto-generates a public setter for the...

8.3CVSS5.9AI score0.00015EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/16 12:0 a.m.6 views

DataEase 安全漏洞

DataEase is an open-source data visualization and analysis tool developed by DataEase. It helps users quickly analyze data and gain insights into business trends, thereby enabling improvements and optimizations in operations. DataEase versions 2.10.20 and earlier contain security vulnerabilities...

8.3CVSS5.9AI score0.00015EPSS
Exploits1References2
NVD
NVD
added 2026/03/20 5:16 a.m.0 views

CVE-2026-32949

SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.7.0 contain a Server-Side Request Forgery SSRF vulnerability that allows an attacker to retrieve arbitrary system and application files from the server. An attacker can exploit the...

8.7CVSS0.0006EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2002-0226

Malware in sbrugna...

7.5CVSS6.4AI score0.05445EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-3667

Malware in sbrugna...

4CVSS6AI score0.1407EPSS
Exploits1References21
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-14939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the mysql aka mysqljs module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default. CVE-2019-14939 Note that Nessu...

5.5CVSS5.6AI score0.00059EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/02/11 3:47 a.m.1 views

SUSE CVE-2025-24787

WhoDB is an open source database management tool. In affected versions the application is vulnerable to parameter injection in database connection strings, which allows an attacker to read local files on the machine the application is running on. The application uses string concatenation to build...

7.5CVSS7.1AI score0.00183EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:11 a.m.3 views

SUSE CVE-2007-3997

The 1 MySQL and 2 MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safemode and openbasedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE...

7.5CVSS7AI score0.32052EPSS
Exploits7References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:56 a.m.1 views

SUSE CVE-2010-3683

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service mysqld daemon crash via a crafted request...

4CVSS6.7AI score0.1407EPSS
Exploits1References5
Veracode
Veracode
added 2020/04/10 12:53 a.m.32 views

Denial Of Service (DoS)

mysql is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the way MySQL handled LOAD DATA INFILE requests allowed MySQL to send OK packets even when there were errors...

4CVSS3.7AI score0.1407EPSS
Exploits1References20Affected Software1
OSV
OSV
added 2019/08/15 6:15 p.m.1 views

UBUNTU-CVE-2018-14669

ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server...

7.5CVSS5.9AI score0.00439EPSS
Exploits0References3
ClickHouse
ClickHouse
added 2018/07/06 12:0 a.m.7 views

CVE-2018-14669

ClickHouse MySQL client had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server. Andrey Krasichkov and Evgeny Sidorov of Yandex Information Security Team...

7.5CVSS5.5AI score0.00439EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2011/01/18 6:38 p.m.2 views

MySQL: mysqld DoS (assertion failure) while reading the file back into a table (MySQL bug #52512)

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service mysqld daemon crash via a crafted request...

4CVSS5.9AI score0.1407EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2011/01/18 12:0 a.m.29 views

MySQL Handler Multiple Denial Of Service Vulnerabilities

MySQL is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...

4CVSS7.3AI score0.1407EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2010/11/12 12:0 a.m.42 views

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : mysql-5.1, mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities (USN-1017-1)

It was discovered that MySQL incorrectly handled certain requests with the UPGRADE DATA DIRECTORY NAME command. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 9.10 and 10.04 LTS. CVE-2010-2008 It was discovered that MySQL...

5CVSS5.4AI score0.1407EPSS
Exploits8References17
UbuntuCve
UbuntuCve
added 2010/11/05 12:0 a.m.30 views

CVE-2010-3683

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service mysqld daemon crash via a crafted request...

4CVSS5.9AI score0.1407EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2010/08/26 12:0 a.m.57 views

MySQL Community Server < 5.1.49 Multiple Vulnerabilities

The version of MySQL Community Server installed on the remote host is earlier than 5.1.49 and thus potentially affected by multiple vulnerabilities: - DDL statements could cause the server to crash. 55039 - Joins involving a table with a unique SET column could cause the server to crash. 54575 -...

4CVSS5.7AI score0.1407EPSS
Exploits8References17
Tenable Nessus
Tenable Nessus
added 2010/08/24 12:0 a.m.13 views

MySQL Community Server 5.1 < 5.1.49 Multiple Denial of Service Vulnerabilities

Binary data 801140.prm...

4CVSS7.3AI score0.1407EPSS
Exploits8References17
OpenVAS
OpenVAS
added 2010/08/24 12:0 a.m.29 views

Mandriva Update for mysql MDVSA-2010:155 (mysql)

Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVSA-2010:155 mysql Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

3.5CVSS0.1AI score0.0478EPSS
Exploits1References2
Rows per page
Query Builder