CVE-2019-20917

InspIRCd vulnerability CVE-2019-20917 affects the mysql module prior to 3.3.0 when built against mariadb-connector-c 3.0.5+, enabling a NULL pointer dereference that can be triggered by users who can connect to a server, and used with sqlauth/sqloper to remotely crash the server. Public advisorie...

CVE-2019-20917

An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connector-c 3.0.5 or newer. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd...

CVE-2019-20917

An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connector-c 3.0.5 or newer. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd...

PT-2019-6268 · Inspircd +4 · Inspircd +4

Name of the Vulnerable Software and Affected Versions: InspIRCd versions prior to 2.0.28 InspIRCd versions prior to 3.3.0 Description: The issue is related to a NULL pointer dereference in the mysql module of InspIRCd when built against mariadb-connector-c 3.0.5 or newer. This can be exploited fo...

DEBIAN-CVE-2019-14939

An issue was discovered in the mysql aka mysqljs module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default...

UBUNTU-CVE-2019-14939

An issue was discovered in the mysql aka mysqljs module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default...

UBUNTU-CVE-2019-1010259

SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.userchpass function from the MySQL module for Salt. The attack vector is: specially crafted...

DEBIAN-CVE-2015-9244

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with mysql.escape which could lead to SQL Injection...

UBUNTU-CVE-2015-9244

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with mysql.escape which could lead to SQL Injection...

CVE-2015-9244

Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with mysql.escape which could lead to SQL Injection...

Fedora 27 : exim (2018-5aec14e125)

This is an update fixing mysql module. ---- This is new version fixing CVE-2018-6789. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Unspecified vulnerability in puppetlabs-mysql

Puppet is a set of configuration management tools based on a client/server C/S architecture from Puppet Labs in the United States, which can be used to manage profiles, users, cron tasks, packages, system services, etc. puppetlabs-mysql is a module that manages MySQL installations and...

CVE-2017-10788

The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by triggering 1 certain error responses from a MySQL server or 2 a loss of a network connection to a MySQL server. The...

CVE-2016-1246

Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service crash via vectors related to an error message...

DEBIAN-CVE-2016-1246

Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service crash via vectors related to an error message...

Pimcore 3.0 / 2.3.0 SQL Injection Vulnerability

Pimcore CMS versions 2.3.0 and 3.0 suffer from a remote SQL injection vulnerability. Pimcore CMS versions 2.3.0 and 3.0 suffer from a remote SQL injection vulnerability. Product & Service Introduction: =============================== Pimcore is a powerful and robust Zend Framework based PHP conte...

CVE-2001-0990

Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, stores authentication data in cleartext inside the libvpopmail.a library. This enables local users to recover MySQL credentials by inspecting vpopmail programs linked against the library. Affected component: vpopmail (MySQL module)...