PT-2025-48274

Name of the Vulnerable Software and Affected Versions MariaDB versions prior to 10.5 MariaDB mariadb-dump Utility affected versions not specified Description The mariadb-dump utility contains a directory traversal flaw that could lead to remote code execution. The utility does not properly saniti...

Moderate Photon OS Security Update - PHSA-2024-5.0-91-0428

Updates of 'calico-bird', 'mariadb' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2024-5.0-0428

Updates of 'mariadb', 'calico-bird' packages of Photon OS have been released...

CBL Mariner 2.0 Security Update: mariadb (CVE-2024-5814)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5814 advisory. - A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it d...

CBL Mariner 2.0 Security Update: mariadb (CVE-2023-6936)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6936 advisory. - In wolfSSL prior to 5.6.6, if callback functions are enabled via the WOLFSSLCALLBACKS flag, then a malicious...

CBL Mariner 2.0 Security Update: mariadb (CVE-2024-5991)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5991 advisory. - In function MatchDomainName, input param str is treated as a NULL terminated string despite being user...

CBL Mariner 2.0 Security Update: mariadb (CVE-2024-1545)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1545 advisory. - Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL...

CBL Mariner 2.0 Security Update: mariadb (CVE-2024-1543)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1543 advisory. - The side-channel protected T-Table implementation in wolfSSL up to version 5.6.5 protects against a side-...

CBL Mariner 2.0 Security Update: mariadb (CVE-2024-0901)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0901 advisory. - Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of...

CBL Mariner 2.0 Security Update: mariadb (CVE-2023-6935)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6935 advisory. - wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing...

CBL Mariner 2.0 Security Update: mariadb (CVE-2024-5288)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5288 advisory. - An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, lead...

CBL Mariner 2.0 Security Update: mariadb (CVE-2023-3724)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3724 advisory. - If a TLS 1.3 client gets neither a PSK pre shared key extension nor a KSE key share extension when connectin...

CBL Mariner 2.0 Security Update: mariadb (CVE-2023-6937)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6937 advisory. - wolfSSL prior to 5.6.6 did not check that messages in one DTLS record do not span key boundaries. As a resul...

CBL Mariner 2.0 Security Update: mariadb (CVE-2024-2881)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-2881 advisory. - Fault Injection vulnerability in wced25519signmsg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL...

CBL Mariner 2.0 Security Update: mariadb (CVE-2024-1544)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1544 advisory. - Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular...

CVE-2024-21096 affecting package mariadb for versions less than 10.6.20-1

CVE-2024-21096 affecting package mariadb for versions less than 10.6.20-1. An upgraded version of the package is available that resolves this issue...

Exploit for Incorrect Authorization in Buddypress

사용법 1. docker를 build하여 취약한 wordpress, buddypress 환경을 구성한다...

CVE-2024-21096 affecting package mariadb for versions less than 10.11.10-1

CVE-2024-21096 affecting package mariadb for versions less than 10.11.10-1. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2024:0384-1 Security update for zabbix

This update for zabbix fixes the following issues: Zabbix was updated to 6.0.33: - this version fixes CVE-2024-36461 and CVE-2024-22114 - New Features and Improvements + ZBXNEXT-9000 Changed query table for ASM disk group metrics in Oracle Database plugin and Oracle by ODBC template Agent Templat...

Fedora 37 : galera / mariadb (2022-e0e9a43546)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-e0e9a43546 advisory. MariaDB 10.5.18 & Galera 26.4.13 Release notes: https://mariadb.com/kb/en/mdb-10-5-18-rn/ Tenable has extracted the preceding description block...