CVE-2024-27295: Use of Incorrectly-Resolved Name or Reference

Directus is a real-time API and App dashboard for managing SQL database content. The password reset mechanism of the Directus backend allows attackers to receive a password reset email of a victim user, specifically having it arrive at a similar email address as the victim with a one or more...

USN-6600-1: MariaDB vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues. MariaDB has been updated to 10.3.39 in Ubuntu 20.04 LTS, 10.6.16 in Ubuntu...

PT-2024-7393 · Mariadb Foundation · Mariadb

Name of the Vulnerable Software and Affected Versions: MariaDB version 11.1 Description: The issue in MariaDB is related to incorrect management of code generation in the lib mysqludf sys.so library, which can be exploited by an attacker to elevate privileges and execute arbitrary code. A remote...

GHSA-24RP-Q3W6-VC56 vulnerabilities

Vulnerabilities for packages: keycloak, mariadb, dependency-track, trino...

GHSA-24RP-Q3W6-VC56 vulnerabilities

Vulnerabilities for packages: dependency-track, mariadb, keycloak, trino...

GHSA-XFG6-62PX-CXC2 vulnerabilities

Vulnerabilities for packages: keycloak-fips, dependency-track, mariadb, keycloak, trino...

GHSA-XFG6-62PX-CXC2 vulnerabilities

Vulnerabilities for packages: trino, keycloak, dependency-track, mariadb...

CVE-2024-1597 vulnerabilities

Vulnerabilities for packages: keycloak, mariadb, dependency-track, trino...

CVE-2024-1597 vulnerabilities

Vulnerabilities for packages: dependency-track, mariadb, keycloak, trino...

CVE-2024-24812

Frappe is a full-stack web application framework that uses Python and MariaDB on the server side and a tightly integrated client side library. Prior to versions 14.59.0 and 15.5.0, portal pages are susceptible to Cross-Site Scripting XSS which can be used to inject malicious JS code if user click...

Cross site scripting

Frappe is a full-stack web application framework that uses Python and MariaDB on the server side and a tightly integrated client side library. Prior to versions 14.59.0 and 15.5.0, portal pages are susceptible to Cross-Site Scripting XSS which can be used to inject malicious JS code if user click...

CVE-2024-24812

CVE-2024-24812 affects the Frappe framework. The vulnerability is a portal-page Cross-Site Scripting (XSS) issue that could allow injection of malicious JavaScript when a user clicks a crafted link. Public sources confirm the issue is in Frappe versions prior to 14.59.0 and 15.5.0 and that it has...

CVE-2024-24812 Frappe Authenticated Reflected Cross site scripting (XSS) in portal pages

Frappe is a full-stack web application framework that uses Python and MariaDB on the server side and a tightly integrated client side library. Prior to versions 14.59.0 and 15.5.0, portal pages are susceptible to Cross-Site Scripting XSS which can be used to inject malicious JS code if user click...

CVE-2024-24812 Frappe Authenticated Reflected Cross site scripting (XSS) in portal pages

Frappe is a full-stack web application framework that uses Python and MariaDB on the server side and a tightly integrated client side library. Prior to versions 14.59.0 and 15.5.0, portal pages are susceptible to Cross-Site Scripting XSS which can be used to inject malicious JS code if user click...

BIT-WORDPRESS-2021-39202

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions the widgets editor introduced in WordPress 5.8 beta 1 has improper handling of HTML input in the Custom HTML feature. This leads to stored XSS in the cust...

BIT-WORDPRESS-2021-39203

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions authenticated users who don't have permission to view private post types/data can bypass restrictions in the block editor under certain conditions. This...

BIT-WORDPRESS-MULTISITE-2021-39202

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions the widgets editor introduced in WordPress 5.8 beta 1 has improper handling of HTML input in the Custom HTML feature. This leads to stored XSS in the cust...

Denial Of Service (DOS)

mariadb is vulnerable to Denial Of Service DOS. The vulnerability is due to how the InnoDB component handles certain conditions, allowing a high privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash of the MySQL Server...

Debian: Security Advisory (DLA-3722-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3722-1] mariadb-10.3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3722-1 [email protected] https://www.debian.org/lts/security/ Bastien ROUCARIÃ?S January 27, 2024 https://wiki.debian.org/LTS -...