Open Solutions For Education openSIS SQL注入漏洞

Open Solutions For Education openSIS is an open source student information management system from Open Solutions for Education USA. Open Solutions for Education openSIS suffers from a SQL injection vulnerability that originates in openSIS version 8.0 when using MySQL or MariaDB as the application...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists due to lack of sanitization allowing an attacker to compromise various network protocols...

mariadb-connector-odbc bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

mariadb-connector-odbc bug fix and enhancement update

An update is available for mariadb-connector-odbc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

ALBA-2021:4163 mariadb-connector-odbc bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

MariaDB 10.3.0 < 10.3.32 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.3.32. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.3.32 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.35 and...

PT-2021-7326 · Mariadb +6 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.6.5 Description: The issue is related to an integer overflow in the sql lex.cc component of MariaDB, which can lead to an application crash. This can be exploited by an attacker to cause a denial of service...

PT-2021-7347 · Mariadb +6 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.5.9 Description: The issue is related to errors in resource release in the set var.cc component of the MariaDB database management system. Exploitation of this issue can lead to a denial of service. It is caused b...

PT-2021-6913 · Mariadb +5 · Mariadb Server +5

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.7 and below Description: An issue in the component Used tables and const cache::used tables and const cache join of MariaDB Server was discovered to allow attackers to cause a Denial of Service DoS via specially...

MariaDB 10.2.0 < 10.2.41 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.41. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.41 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.35 and...

MariaDB 10.4.0 < 10.4.22 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.4.22. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.4.22 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.35 and...

MariaDB 10.5.0 < 10.5.13 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.5.13. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.5.13 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.35 and...

NewStart CGSL CORE 5.05 / MAIN 5.05 : mariadb Multiple Vulnerabilities (NS-SA-2021-0162)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has mariadb packages installed that are affected by multiple vulnerabilities: - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.6.45 and prior,...

NewStart CGSL MAIN 6.02 : mariadb-connector-c Multiple Vulnerabilities (NS-SA-2021-0123)

The remote NewStart CGSL host, running version MAIN 6.02, has mariadb-connector-c packages installed that are affected by multiple vulnerabilities: - libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE:...

MariaDB 10.6.0 < 10.6.3 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.6.3. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.6.3 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.35 and...

The vulnerability of the mysql_install_db function in the MariaDB database management system arises from an improper definition of the reference before accessing the file, allowing attackers to escalate their privileges.

The vulnerability of the mysqlinstalldb function in the MariaDB database management system is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges...

Gestionale Open 11.00.00 - Local Privilege Escalation Vulnerability

Exploit Title: Gestionale Open 11.00.00 - Local Privilege Escalation Author: Alessandro 'mindsflee' Salzano Vendor Homepage: https://www.gestionaleopen.org/ Software Homepage: https://www.gestionaleopen.org/ Software Link:...

PT-2021-7210 · Mariadb +5 · Mariadb Server +5

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions prior to 10.7 Description: The issue is related to the method log statement ex in the server audit/server audit.c plugin, which does not release the lock bigbuffer lock correctly. This can lead to a deadlock, allowing...

OpenClinic GA 5.194.18 Privilege Escalation

Exploit Title: OpenClinic GA 5.194.18 - Local Privilege Escalation Date: 2021-07-24 Author: Alessandro Salzano Vendor Homepage: https://sourceforge.net/projects/open-clinic/ Software Homepage: https://sourceforge.net/projects/open-clinic/ Software Link:...

Gestionale Open 11.00.00 Privilege Escalation

Exploit Title: Gestionale Open 11.00.00 - Local Privilege Escalation Date: 2021-07-19 Author: Alessandro 'mindsflee' Salzano Vendor Homepage: https://www.gestionaleopen.org/ Software Homepage: https://www.gestionaleopen.org/ Software Link:...