6900 matches found
CVE-2012-5612
Disclaimer: This data contains information about vulnerable...
CVE-2012-5614
Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service mysqld crash via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements...
CVE-2012-5611
Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...
CVE-2012-5615
CVE-2012-5615 affects Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.x and earlier. The flaw causes different error messages and time delays depending on whether a username exists, enabling remote username enumeration. The connected Red Hat advisories (RHSA-2014-1940 and rel...
CVE-2012-5612
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service memory corruption and crash and possibly execute arbitrary code, as demonstrated using certain...
CVE-2012-5615
Disclaimer: This data contains information about vulnerable...
CVE-2012-5615
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames...
CVE-2012-5611
Disclaimer: This data contains information about vulnerable...
CVE-2012-5614
CVE-2012-5614 affects Oracle MySQL before 5.1.67 and 5.5.29, and MariaDB before 5.5.28a. The vulnerability allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT that uses UpdateXML with XML containing a large number of unique, nested elements. Connected source...
CVE-2012-5611
CVE-2012-5611 is a stack-based buffer overflow in the MySQL acl_get/user permission checking path. An authenticated remote user could crash mysqld or potentially execute arbitrary code. Affected: MySQL/MariaDB branches listed in the initial entry (e.g., 5.5.x up to 5.5.28a, 5.1.x up to 5.1.66; Ma...
PT-2012-6060 · Mariadb Foundation +2 · Mariadb +2
Name of the Vulnerable Software and Affected Versions: MySQL versions 5.5.19 and possibly other versions MariaDB versions 5.5.28a and possibly other versions Description: The issue allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL...
CVE-2012-5613
CVE-2012-5613 affects MySQL 5.5.19 (and potentially other 5.5.x versions) and MariaDB 5.5.28a (and possibly others) when the FILE privilege is assigned to users who should not have administrative rights. The issue allows remote authenticated users to escalate privileges by using the FILE privileg...
CVE-2012-5611
Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...
CVE-2012-5613
MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as...
PT-2012-6061 · Oracle +3 · Mysql Server +4
Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.1.67 and earlier Oracle MySQL versions 5.5.29 and earlier MariaDB versions 5.5.28a and possibly other versions Description: The issue allows remote authenticated users to cause a denial of service, resulting in a mysql...
CVE-2012-5615
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames...
CVE-2012-5612
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service memory corruption and crash and possibly execute arbitrary code, as demonstrated using certain...
CVE-2012-5611 MySQL Buffer Overflow
Stack-based buffer overflow in the aclget function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to...
UBUNTU-CVE-2012-5615
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames...
