52728 matches found
CVE-2025-41076: Generation of Error Message Containing Sensitive Information
In version 6.13.0 of LimeSurvey, any external user can cause a 500 error in the survey system by sending a malformed session cookie. Instead of displaying a generic error message, the system exposes internal backend information, including the use of the Yii framework, the MySQL/MariaDB database...
TencentOS Server 3: mysql:8.0 (TSSA-2024:0079)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0079 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
TencentOS Server 3: mysql (TSSA-2023:0119)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0119 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
TencentOS Server 3: python3.11-PyMySQL (TSSA-2024:0309)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0309 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
CVE-2025-12743
The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connection name, which is a reserved internal name for Looker's internal MySQL database. The schemas parameter is vulnerable to SQL injection, enabling attackers to manipulate SELECT...
CVE-2025-12743 SQL Injection in Looker Project Generation Endpoint Allows Access to Internal MySQL Database
The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connection name, which is a reserved internal name for Looker's internal MySQL database. The schemas parameter is vulnerable to SQL injection, enabling attackers to manipulate SELECT...
CVE-2025-12743 SQL Injection in Looker Project Generation Endpoint Allows Access to Internal MySQL Database
The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connection name, which is a reserved internal name for Looker's internal MySQL database. The schemas parameter is vulnerable to SQL injection, enabling attackers to manipulate SELECT...
USN-7873-1 mysql-8.0, mysql-8.4 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4.7. In addition to security fixes, the...
USN-7873-1: MySQL vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.44 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.04 and Ubuntu 25.10 have been updated to MySQL 8.4.7. In addition to security fixes, the...
PT-2025-47476
Name of the Vulnerable Software and Affected Versions Looker versions prior to 24.12.106 Looker versions 24.12.106 through 24.18.198 Looker versions prior to 25.0.75 Looker versions 25.0.75 through 25.6.63 Looker versions prior to 25.6.63 Looker versions 25.6.63 through 25.8.45 Looker versions...
CVE-2025-12743: Improper Neutralization of Special Elements used in an SQL Command
The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connection name, which is a reserved internal name for Looker's internal MySQL database. The schemas parameter is vulnerable to SQL injection, enabling attackers to manipulate SELECT...
CVE-2025-53069 affecting package mysql for versions less than 8.0.44-2
CVE-2025-53069 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-53040 affecting package mysql for versions less than 8.0.44-2
CVE-2025-53040 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-53044 affecting package mysql for versions less than 8.0.44-2
CVE-2025-53044 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-53042 affecting package mysql for versions less than 8.0.44-2
CVE-2025-53042 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-53054 affecting package mysql for versions less than 8.0.44-2
CVE-2025-53054 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-53045 affecting package mysql for versions less than 8.0.44-2
CVE-2025-53045 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-53053 affecting package mysql for versions less than 8.0.44-2
CVE-2025-53053 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-53062 affecting package mysql for versions less than 8.0.44-2
CVE-2025-53062 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...