Lucene search
+L

843 matches found

BDU FSTEC
BDU FSTEC
•added 2022/05/05 12:00 a.m.•11 views

Vulnerability of the MySQL Server component: The Optimizer component of the MySQL database management system allows a hacker to gain unauthorized access to modify, add, or delete data, or to cause service failures.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to modify, add, or delete data, or to cause a service failure using the MySQL network protocol...

7.5CVSS6.4AI score0.01257EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/05/04 12:00 a.m.•12 views

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL database management system’s server allows a hacker to trigger a service failure.

The vulnerability of the MySQL Server component exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

6.8CVSS6.3AI score0.01421EPSS
SaveExploits0References4Affected Software1
Microsoft CVE
Microsoft CVE
•added 2022/04/28 7:00 a.m.•7 views

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

4.9CVSS6.5AI score0.01456EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/04/14 12:00 a.m.•15 views

Vulnerability of the Server component: The DDL system for database management in MySQL, which allows a hacker to cause a service failure.

Vulnerability of the Server component: The DDL system for managing databases in MySQL is vulnerable to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

6.8CVSS6.5AI score0.03218EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/04/14 12:00 a.m.•14 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.4AI score0.01791EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/14 12:00 a.m.•10 views

The vulnerability of the InnoDB component of the MySQL database management system, which allows attackers to access confidential data

The vulnerability of the InnoDB component in the MySQL database management system is related to the disclosure of information. Exploiting this vulnerability allows an attacker to gain access to confidential data...

4.4CVSS6.4AI score0.00456EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/14 12:00 a.m.•15 views

Vulnerability of the Server component: The Replication module of the MySQL database management system, which allows attackers to compromise data integrity and cause service interruptions.

The vulnerability of the Server: Replication component of the MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity and cause service failures...

7CVSS7.1AI score0.02203EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/04/08 12:00 a.m.•17 views

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.

Vulnerability of the Cluster component: General database management systems like MySQL Cluster involve reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

6.3CVSS7.4AI score0.02686EPSS
SaveExploits0References8Affected Software1
CNNVD
CNNVD
•added 2022/04/08 12:00 a.m.•15 views

Ecommerce-Website 代码问题漏洞

Ecommerce-Website is complete e-commerce website with an administration panel built using PHP and MySql. version v1.1.0 of Ecommece-Website is vulnerable to file uploads, which can be exploited by attackers to execute arbitrary code via carefully crafted PHP files...

8.8CVSS6.1AI score0.0271EPSS
SaveExploits3References5
Github Security Blog
Github Security Blog
•added 2022/04/06 12:01 a.m.•47 views

Files or Directories Accessible to External Parties in Adminer

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...

7.5CVSS8AI score0.13641EPSS
SaveExploits4References7Affected Software1
OSV
OSV
•added 2022/04/06 12:01 a.m.•39 views

GHSA-RXFQ-3VPC-VV72 Files or Directories Accessible to External Parties in Adminer

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...

7.5CVSS7.3AI score0.13641EPSS
SaveExploits4References7
BDU FSTEC
BDU FSTEC
•added 2022/04/06 12:00 a.m.•11 views

The vulnerability of the InnoDB component of the MySQL database management system, which allows a hacker to cause a service failure

The vulnerability of the InnoDB component in the MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.1CVSS6.8AI score0.04267EPSS
SaveExploits0References6Affected Software2
Prion
Prion
•added 2022/04/05 2:15 a.m.•35 views

Improper access control

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...

5CVSS7.3AI score0.13641EPSS
SaveExploits4References5Affected Software2
Cvelist
Cvelist
•added 2022/04/05 1:46 a.m.•52 views

CVE-2021-43008

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...

7.5AI score0.13641EPSS
SaveExploits4References5
CVE
CVE
•added 2022/04/05 1:46 a.m.•201 views

CVE-2021-43008

The CVE-2021-43008 vulnerability affects Adminer ≤ 4.6.2, where improper access control allows an attacker-controlled remote MySQL server to trigger Adminer to read a local file via LOAD DATA LOCAL INFILE, exposing sensitive files (e.g., /etc/passwd). The issue can enable Arbitrary File Read on t...

7.5CVSS7.2AI score0.13641EPSS
SaveExploits4References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/05 12:00 a.m.•4 views

CVE-2021-43008: Undefined Security Weakness

Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database...

7.5CVSS7.2AI score0.13641EPSS
SaveExploits4References1
zdt
zdt
•added 2022/03/30 12:00 a.m.•254 views

Fingerprint Attendance 1.0 SQL Injection Vulnerability

Title: Fingerprint Attendance 1.0 Blind boolean SQLi To Rce Author: Hejap Zairy Vendor: https://www.vetbossel.in/fingerprint-attendance-project-php/ Software: https://app.box.com/s/xlyqalhvayq8oi25tqykcbouzrrjytqy Reference: https://github.com/Matrix07ksa Tested on: Windows, MySQL, Apache Steps 1...

0.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/03/30 12:00 a.m.•13 views

Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, allowing attackers to access, modify, add, or delete data.

The vulnerability of the MySQL Server component’s Security: Privileges section relates to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain access to modify, add, or delete data using the MySQL network protocol...

4.3CVSS6.7AI score0.01456EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/03/28 12:00 a.m.•18 views

Vulnerability of the MySQL Server component: The Optimizer component of the MySQL database management system allows a hacker to cause service failures or gain access to modify, add, or delete data.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or gain access to modify, add, or delete data using the MySQL network protocol...

7CVSS6.4AI score0.01223EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/03/28 12:00 a.m.•13 views

Vulnerability of the MySQL Server component: The Optimizer component of the MySQL database management system allows a hacker to cause service failures or gain access to modify, add, or delete data.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

5.3CVSS6.4AI score0.0169EPSS
SaveExploits0References7Affected Software2
Rows per page
Query Builder