CVE-2022-32081

Addressed in MariaDB advisories: CVE-2022-32081 affects MariaDB 10.4–10.7 due to a use-after-poison in prepare_inplace_add_virtual (handler0alter.cc). Connected advisories (ALAS2MARIADB10.5-2023-002/003) confirm remediation by upgrading to fixed MariaDB 10.5.x builds (e.g., 10.5.18) and related p...

MariaDB 安全漏洞

MariaDB is a free and open source database management system from the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine.There is a security vulnerability in the MariaDB version that stems from the existence of a segmentation error found through the component...

CVE-2022-32082

MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...

CVE-2022-32084

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...

CVE-2022-32091

MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc...

CVE-2022-32089

MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel...

CVE-2022-32084

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...

CVE-2022-32089

MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel...

CVE-2022-32084

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...

Laundry Management System 1.0 SQL Injection Exploit

Exploit Title: Laundry Management System 1.0 - Authenticated SQL Injection Exploit Author: syad Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-cilaundry.zip Version: 1.0 Tested on: Windows 10 + XAMPP 3.2.4 C...

Laundry Management System 1.0 SQL Injection

Exploit Title: Laundry Management System 1.0 - Authenticated SQL Injection Date: 29-06-2022 Exploit Author: syad Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-cilaundry.zip Version: 1.0 Tested on: Windows 1...

SUSE: Security Advisory (SUSE-SU-2022:2189-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : mariadb (SUSE-SU-2022:2189-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2189-1 advisory. Update to 10.4.25 bsc1199928: - CVE-2021-46669 bsc1199928 - CVE-2022-21427 bsc1199928 - CVE-2022-27376 bsc1198628 - CVE-2022-27377...

SUSE-SU-2022:2189-1 Security update for mariadb

This update for mariadb fixes the following issues: Update to 10.4.25 bsc1199928: - CVE-2021-46669 bsc1199928 - CVE-2022-21427 bsc1199928 - CVE-2022-27376 bsc1198628 - CVE-2022-27377 bsc1198603 - CVE-2022-27378 bsc1198604 - CVE-2022-27379 bsc1198605 - CVE-2022-27380 bsc1198606 - CVE-2022-27381...

The vulnerability of the xbstream_open function in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the xbstreamopen function extra/mariabackup/dsxbstream.cc in the MariaDB database management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `create_worker_threads` method in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `create_worker_threads` method in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the log_statement_ex method (plugin/server_audit/server_audit.c) of the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the logstatementex method in the MariaDB database management system’s plugin/serveraudit/serveraudit.c file is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the sql/sql_window.cc component of the MariaDB database management system, which allows a hacker to cause a service failure.

The vulnerability of the sql/sqlwindow.cc component in the MariaDB database management system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2022:2160-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2160-1 advisory. - MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...