Lucene search
+L

446 matches found

OSV
OSV
added 2022/01/10 2:10 p.m.9 views

CVE-2020-29050

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc directory. NOTE: this is unrelated to CMUSphinx...

7.5CVSS7.4AI score
SaveExploits0References3
NVD
NVD
added 2022/01/10 2:10 p.m.23 views

CVE-2020-29050

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc directory. NOTE: this is unrelated to CMUSphinx...

7.5CVSS0.02166EPSS
SaveExploits2References3
OSV
OSV
added 2022/01/10 2:10 p.m.5 views

UBUNTU-CVE-2020-29050

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc directory. NOTE: this is unrelated to CMUSphinx...

7.5CVSS5.8AI score0.02166EPSS
SaveExploits2References2
Prion
Prion
added 2022/01/10 2:10 p.m.30 views

Directory traversal

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc directory. NOTE: this is unrelated to CMUSphinx...

5CVSS7.3AI score0.02166EPSS
SaveExploits2References3Affected Software2
Debian CVE
Debian CVE
added 2022/01/07 6:2 a.m.62 views

CVE-2020-29050

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL SNIPPETS and loadfile operations on a full pathname e.g., a file in the /etc directory. NOTE: this is unrelated to CMUSphinx...

7.5CVSS7.5AI score0.02166EPSS
SaveExploits2
Microsoft CVE
Microsoft CVE
added 2021/10/27 7:0 a.m.6 views

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

...

6.5CVSS7AI score0.0251EPSS
SaveExploits0
OSV
OSV
added 2021/10/20 11:17 a.m.6 views

AZL-6708 CVE-2021-35597 affecting package mysql for versions less than 8.0.28-1

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this...

6.5CVSS6.7AI score0.0251EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/20 11:17 a.m.5 views

CVE-2021-35597

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this...

6.5CVSS6.7AI score0.0251EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2021/10/20 11:17 a.m.13 views

UBUNTU-CVE-2021-35597

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this...

6.5CVSS6.7AI score0.0251EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2021/10/20 10:50 a.m.13 views

CVE-2021-35597

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this...

6.5CVSS6.4AI score0.0251EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/10/20 10:50 a.m.26 views

CVE-2021-35597

Removed by vendor...

6.5CVSS6.7AI score0.0251EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2021/10/12 2:17 p.m.15 views

mysql: C API unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

4.9CVSS7.2AI score0.01413EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/10/12 2:17 p.m.9 views

mysql: C API unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client...

7.1CVSS7.3AI score0.03028EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/09/21 10:13 a.m.8 views

mysql: C API unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client...

7.1CVSS7.3AI score0.03028EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2021/07/06 12:0 a.m.44 views

EulerOS Virtualization 3.0.2.2 : mariadb (EulerOS-SA-2021-2148)

According to the version of the mariadb package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prio...

5.9CVSS6.4AI score0.03485EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2015:1177-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.4AI score0.9986EPSS
SaveExploits19References27
Tenable Nessus
Tenable Nessus
added 2021/04/30 12:0 a.m.53 views

EulerOS 2.0 SP3 : mariadb (EulerOS-SA-2021-1815)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prior, 5.7.28 a...

6.5CVSS6AI score0.03726EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.47 views

EulerOS Virtualization for ARM 64 3.0.2.0 : mariadb (EulerOS-SA-2021-1391)

According to the version of the mariadb packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are...

7.1CVSS7AI score0.03028EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.48 views

EulerOS Virtualization 3.0.2.6 : mariadb (EulerOS-SA-2021-1443)

According to the version of the mariadb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and...

5.9CVSS6.4AI score0.03485EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2021-1443)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6AI score0.03485EPSS
SaveExploits0References2
Rows per page
Query Builder