mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause...

mariadb: Integer overflow in sql_lex.cc integer leading to crash

An integer overflow vulnerability was found in MariaDB, where an invalid size of refpointerarray is allocated. This issue results in a denial of service...

mariadb: improper locking due to unreleased lock in the ds_xbstream.cc

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an error occurs streamctxt-destfile == NULL while executing the method xbstreamopen, the held lock is not released correctly, which allows local users to trigger a denial of service due to the...

mariadb: save_window_function_values triggers an abort during IN subquery

savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindowfunc=true for a subquery...

SUSE SLES15: libmariadbd-devel / libmariadbd19 / mariadb / mariadb-client / etc (SUSE-SU-2022:0731-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0731-1 advisory. - Update to 10.5.15 bsc1196016: 10.5.15: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 10.5.14:...

Inventory Management System 1.0 SQL Injection

Title: Inventory Management System 1.0 Blind SQLi To Rce Author: Hejap Zairy Date: 12.07.2022 Vendor: https://www.vetbossel.in/inventory-management-system-php/ Software: https://cutt.ly/lOZ8lrr Reference: https://github.com/Matrix07ksa Tested on: Windows, MySQL, Apache vulnerability Code php php...

Stack-based Buffer Overflow

mariadb is vulnerable to stack-based buffer overflow. The vulnerability exists because of specific flaw exists within the processing of SQL queries which allows local attackers to escalate privileges on affected installations of MariaDB...

Privilege Escalation

MariaDB is vulnerable to privilege escalation. The vulnerability exists due to a Use-After-Free Privilege due to a lack of sanitization of the existence of an object prior to performing operations on the object...

Privilege Escalation

MariaDB is vulnerable to Privilege Escalation. The vulnerability exists due to a lack of sanitization of a user-supplied string before using it as a format specifier...

Privilege Escalation

MariaDB is vulnerable to privilege escalation. The vulnerability exists due to a Heap-based Buffer Overflow Privilege Escalation Vulnerability...

Denial Of Service (DoS)

MariaDB is vulnerable to denial of service. The vulnerability exists due to an improper interaction with storage-engine resource limitations for temporary data structures...

Integer Overflow

MariaDB before 10.6.5 has a sqllex.cc integer overflow, leading to an application crash...

Denial Of Service (DoS)

MariaDB is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization of the SELECTLEX::nestlevel which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

MariaDB is vulnerable to denial of service. It allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...

Denial Of Service (DoS)

MariaDB is vulnerable to denial of service. The vulnerability exists due to an unused common table expression CTE causing the system to crash...

Denial Of Service (DoS)

MariaDB is vulnerable to denial of service. It allows an application crash in subselectpostjoinaggr for a NULL value of aggr...

Denial Of Service (DoS)

MariaDB is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization of the SELECT statements triggering a hamaria::extra application crash...

Denial Of Service (DoS)

MariaDB is vulnerable to denial of service. It allows a sqlparse.cc application crash because of incorrect usedtables expectations...

XSS in doc_link

Impact Users of MySQL, MariaDB, PgSQL and SQLite are affected. XSS is in most cases prevented by strict CSP in all modern browsers. The only exception is when Adminer is using a pdo extension to communicate with the database it is used if the native extensions are not enabled. In browsers without...

GHSA-2V82-5746-VWQC XSS in doc_link

Impact Users of MySQL, MariaDB, PgSQL and SQLite are affected. XSS is in most cases prevented by strict CSP in all modern browsers. The only exception is when Adminer is using a pdo extension to communicate with the database it is used if the native extensions are not enabled. In browsers without...