Huawei EulerOS: Security Advisory for mariadb-connector-c (EulerOS-SA-2020-2414)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for mariadb-connector-c (EulerOS-SA-2020-2432)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mariadb-java-client bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALBA-2020:4826 mariadb-java-client bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

PT-2020-17051 · Mariadb Foundation +4 · Mariadb +3

With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code on the server machine to intercept the named pipe connection and act as a man-in-the-middle, gaining access to all the data passed between...

EulerOS 2.0 SP9 : mariadb-connector-c (EulerOS-SA-2020-2432)

According to the version of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a...

EulerOS 2.0 SP9 : mariadb-connector-c (EulerOS-SA-2020-2414)

According to the version of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a...

MariaDB 10.2.0 < 10.2.35 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.35. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.35 advisory. - With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged us...

MariaDB 10.5.0 < 10.5.7 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.5.7. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.5.7 advisory. - With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user...

MariaDB 10.4.0 < 10.4.16 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.4.16. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.4.16 advisory. - With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged us...

MariaDB 10.1.0 < 10.1.48 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.48. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.48 advisory. - With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged us...

MariaDB 10.3.0 < 10.3.26 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.3.26. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.3.26 advisory. - With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged us...

Gym Management System 1.0 SQL Injection

Exploit Title: Gym Management System 1.0 - Authentication Bypass Date: 21/10/2020 Exploit Author: Jyotsna Adhana Vendor Homepage: https://www.sourcecodester.com/php/14541/gym-management-system-using-phpmysqli-source-code.html Software Link:...

Vulnerabilities fixed in MariaDB

Vulnerabilities have been fixed in MariaDB. The vulnerabilities allow a malicious person to perform a denial-of-service execution. In the case of the vulnerability with attribute CVE-2020-13249, it also involves an attack from the network. -= Ubuntu =- Canonical has made updates available for...

Ubuntu: Security Advisory (USN-4603-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : mariadb (ALAS-2020-1537)

The version of mariadb installed on the remote host is prior to 5.5.68-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1537 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Pluggable Auth. Supported versions tha...

USN-4603-1 mariadb-10.1, mariadb-10.3 vulnerabilities

It was discovered that MariaDB didn't properly validate the content of a packet received from a server. A remote attacker could use this vulnerability to sent a specialy crafted file to cause a denial of service. CVE-2020-13249 It was discovered that MariaDB has other security issues. An attacker...

USN-4603-1: MariaDB vulnerabilities

It was discovered that MariaDB didn't properly validate the content of a packet received from a server. A remote attacker could use this vulnerability to sent a specialy crafted file to cause a denial of service. CVE-2020-13249 It was discovered that MariaDB has other security issues. An attacker...

MariaDB: Named pipe connection inteception

With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code on the server machine to intercept the named pipe connection and act as a man-in-the-middle, gaining access to all the data passed between...

Ubuntu 18.04 LTS / 20.04 LTS : MariaDB vulnerabilities (USN-4603-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4603-1 advisory. It was discovered that MariaDB didn't properly validate the content of a packet received from a server. A remote attacker could use this...