MariaDB 10.0.x < 10.0.33 / 10.1.x < 10.1.27 Multiple Vulnerabilities

The version of MariaDB running on the remote host is prior to 10.0.x prior to 10.0.33 or 10.1.x prior to 10.1.27. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105076; scriptversion"1.8";...

MariaDB 10.2.0 < 10.2.10 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.10. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.10 advisory. - sql/eventdataobjects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and...

MariaDB 10.3.x < 10.3.1 Multiple DoS Vulnerabilities

The version of MariaDB running on the remote host is prior to 10.3.1. It is, therefore, affected by multiple denial of service vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105078; scriptversion"1.6"; scriptcvsdate"Date: 2018/11/15 20:50:21";...

MariaDB 10.3.1 < 10.3.2 Multiple DoS Vulnerabilities

The version of MariaDB running on the remote host is prior to 10.3.2. It is, therefore, affected by multiple denial of service vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105079; scriptversion"1.6"; scriptcvsdate"Date: 2018/11/15 20:50:21";...

Security fix for the ALT Linux 8 package mariadb version 10.1.29-alt1

Dec. 6, 2017 Alexey Shabalin 10.1.29-alt1 - 10.1.29 - Fixes for the following security vulnerabilities: + CVE-2017-10378 + CVE-2017-10268 + MDEV-13819...

Techno Portfolio Management Panel - id SQL Injection

Techno Portfolio Management Panel - id SQL Injection Exploit Title: Techno - Portfolio Management Panel 1.0 - SQL Injection Dork: N/A Date: 02.12.2017 Vendor Homepage: https://codecanyon.net/user/engtechno Software Link: https://codecanyon.net/item/techno-portfolio-management-panel/20919551 Demo:...

Techno Portfolio Management Panel - 'id' SQL Injection

Exploit Title: Techno - Portfolio Management Panel 1.0 - SQL Injection Dork: N/A Date: 02.12.2017 Vendor Homepage: https://codecanyon.net/user/engtechno Software Link: https://codecanyon.net/item/techno-portfolio-management-panel/20919551 Demo: http://dacy.esy.es/eng/ Version: 1.0 Category: Webap...

Techno Portfolio Management Panel - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Techno - Portfolio Management Panel 1.0 - SQL Injection Vendor Homepage: https://codecanyon.net/user/engtechno Software Link: https://codecanyon.net/item/techno-portfolio-management-panel/20919551 Demo: http://dacy.esy.es/eng/...

GLSA-201711-04 : MariaDB, MySQL: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-201711-04 MariaDB, MySQL: Root privilege escalation The Gentoo installation scripts before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysq...

MariaDB, MySQL: Root privilege escalation

Background MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL. Description The Gentoo installation scripts before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging...

MariaDB 10.0.0 < 10.0.31 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.31. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.31 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are...

[slackware-security] mariadb

New mariadb packages are available for Slackware 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mariadb-10.0.33-i586-1slack14.2.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2017:2921-1)

This update for mariadb fixes several issues. These security issues were fixed : - CVE-2017-3636: Client programs had an unspecified vulnerability that could lead to unauthorized access and denial of service bsc1049399 - CVE-2017-3641: DDL unspecified vulnerability could lead to denial of service...

Slackware 14.1 / 14.2 / current : mariadb (SSA:2017-306-01)

New mariadb packages are available for Slackware 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-306-01. The text itself is copyright C...

SUSE-SU-2017:2921-1 Security update for mariadb

This update for mariadb fixes several issues. These security issues were fixed: - CVE-2017-3636: Client programs had an unspecified vulnerability that could lead to unauthorized access and denial of service bsc1049399 - CVE-2017-3641: DDL unspecified vulnerability could lead to denial of service...

CVE-2017-15945

The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql...

CVE-2017-15945

The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql...

CVE-2017-15945

The CVE-2017-15945 issue affects Gentoo package installation scripts for dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera prior to 2017-09-29. The root cause is misused chown calls on user-writable directory trees, enabling a local user with acc...

openSUSE Security Update : cacti and cacti-spine (openSUSE-2017-1173)

This update for cacti and cacti-spine fixes the following issues : Build version 1.1.26 - issue841: --input-fields variable not working with addgraphs.php cli - issue986: Resolve minor appearance problem on Modern theme - issue989: Resolve issue with data input method commands loosing spaces on...

Blisqy - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB)

A slow data siphon for MySQL/MariaDB using bitwise operation on printable ASCII characters, via a blind-SQL injection. Usage USAGE: blisqy.py --server --port --header --hvalue --inject --payload --dig --sleeptime Options: -h, --help show this help message and exit --server=WEBSERVER Specify host...