CVE-2022-27379

CVE-2022-27379 affects MariaDB Server, with the vulnerable component in Arg_comparator::compare_real_fixed. Affected: MariaDB Server v10.6.2 and below. Description and connected advisories consistently indicate this flaw can cause a Denial of Service (DoS) via specially crafted SQL statements, im...

CVE-2022-27378

CVE-2022-27378 affects MariaDB Server, specifically the Create_tmp_table::finalize routine, with exploitation leading to a Denial of Service via specially crafted SQL statements. Available connected documents corroborate the issue across multiple MariaDB versions (notably v10.7 and below) and des...

CVE-2022-27379

An issue in the component Argcomparator::comparerealfixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

CVE-2022-27376

CVE-2022-27376 affects MariaDB Server v10.6.5 and earlier. The vulnerability is a use-after-free in the Item_args::walk_arg function, exploitable via specially crafted SQL statements. According to the connected documents, this can lead to a crash (denial of service) with impact on availability. C...

CVE-2022-27376

MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Itemargs::walkarg, which is exploited via specially crafted SQL statements...

CVE-2022-27376

Disclaimer: This data contains information about vulnerable...

MariaDB 资源管理错误漏洞

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB Server v10.6 and lower, which stems from the inclusion of use-after-free in the component...

Inventory Management System 1.0 SQL Injection

Title: Inventory Management System 1.0 Blind SQLi To Rce Author: Hejap Zairy Date: 12.07.2022 Vendor: https://www.vetbossel.in/inventory-management-system-php/ Software: https://cutt.ly/lOZ8lrr Reference: https://github.com/Matrix07ksa Tested on: Windows, MySQL, Apache vulnerability Code php php...

PT-2022-6932 · Mariadb +9 · Mariadb Server +9

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.6.3 and below Description: The issue is related to an use-after-free in the my mb wc latin1 component at /strings/ctype-latin1.c. This could potentially allow a remote attacker to cause a denial of service...

PT-2022-5559 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions prior to 10.9 Description: The issue is related to an assertion failure in the MariaDB Server, specifically in the /row/row0mysql.cc component. This failure can be triggered via the condition node-pcur-rel pos == BTR...

PT-2022-6938 · Mariadb +9 · Mariadb Server +9

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.9 and below Description: The issue is related to a segmentation fault in the sql/item subselect.cc component of the MariaDB Server. This can be exploited by a remote attacker to cause a denial of service. The...

PT-2022-6936 · Mariadb +9 · Mariadb Server +9

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.9 and below Description: The issue is related to a segmentation fault in the sql/field conv.cc component of the MariaDB Server. This fault can be exploited by a remote attacker to cause a denial of service. The...

PT-2022-6933 · Mariadb +9 · Mariadb Server +9

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.6.3 and below Description: The issue is related to a use-after-free vulnerability in the my wildcmp 8bit impl component of the MariaDB database management system. This vulnerability can be exploited by a remote...

PT-2022-6937 · Mariadb +9 · Mariadb Server +9

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.9 and below Description: The issue is related to a segmentation fault in the sql/item cmpfunc.h component of the MariaDB Server. It is associated with insufficient use of the assert function. Exploitation of this...

Mageia: Security Advisory (MGASA-2019-0181)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0461)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0332)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0139)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-6913 · Mariadb +5 · Mariadb Server +5

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.7 and below Description: An issue in the component Used tables and const cache::used tables and const cache join of MariaDB Server was discovered to allow attackers to cause a Denial of Service DoS via specially...

PT-2021-7210 · Mariadb +5 · Mariadb Server +5

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions prior to 10.7 Description: The issue is related to the method log statement ex in the server audit/server audit.c plugin, which does not release the lock bigbuffer lock correctly. This can lead to a deadlock, allowing...