Lucene search
+L

53245 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•11 views

CVE-2026-56704: Improper Neutralization of Input During Web Page Generation

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

6.1CVSS6.4AI score0.00337EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•31 views

PT-2026-81131

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

6.1CVSS6.4AI score0.00337EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-56704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling...

6.1CVSS6.4AI score0.00337EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•33 views

PT-2026-81263

Name of the Vulnerable Software and Affected Versions Cloud Foundry UAA affected versions not specified Description Improper handling of case sensitivity in the identity zone authorization check within the Identity Zone Endpoint allows a remote authenticated attacker with zones.write authority to...

8.7CVSS5.8AI score0.00528EPSS
SaveExploits0References6
Cloud Foundry
Cloud Foundry
•added 2026/08/24 12:00 a.m.•23 views

CVE-2026-59335 - UAA case insensitive check bypass | Cloud Foundry

Severity CVSSv4.0 – 7.7 — CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N CVSSv3.1 – 8.7 — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N Vendor CloudFoundry Foundation Versions Affected Severity is High unless otherwise noted. UAA All versions prior to v78.16.0 CF Deployment All...

8.7CVSS6.1AI score0.00528EPSS
SaveExploits0
Fedora
Fedora
•added 2026/08/21 5:20 a.m.•14 views

[SECURITY] Fedora 44 Update: python-asyncmy-0.2.14-1.fc44

asyncmy is a fast asyncio MySQL/MariaDB driver, which reuses most of pymysql and aiomysql but rewrites the core protocol with Cython to speed it up...

5.9AI score
SaveExploits0
Fedora
Fedora
•added 2026/08/21 4:53 a.m.•13 views

[SECURITY] Fedora 43 Update: python-asyncmy-0.2.14-1.fc43

asyncmy is a fast asyncio MySQL/MariaDB driver, which reuses most of pymysql and aiomysql but rewrites the core protocol with Cython to speed it up...

5.9AI score
SaveExploits0
osv_azl
osv_azl
•added 2026/08/20 6:16 p.m.•24 views

AZL-97527 CVE-2026-63381 affecting package mysql for versions less than 8.0.46-2

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c when evbufferaddbufferreference processes an output buffer whose outtotallen is zero. evbufferfreeallchains frees the initial empty chain without resetting outbuf-first,...

5.8CVSS7.2AI score0.0016EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/08/20 6:16 p.m.•16 views

AZL-97521 CVE-2026-63383 affecting package mysql for versions less than 8.0.46-2

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a contiguous evbuffer region in eventtagging.c when decodetaginternal requests at most five bytes from evbufferpullup but iterates using the full logical buffer length. A fragmented evbuffer...

8.7CVSS7.3AI score0.00488EPSS
SaveExploits0References1
Rockylinux
Rockylinux
•added 2026/08/20 6:07 p.m.•25 views

mysql8.4 security, bug fix, and enhancement update

An update is available for mysql8.4. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is a multi-user, multi-threaded SQL database server. MySQL is a...

8.4CVSS7.2AI score0.00486EPSS
SaveExploits0
osv_rhsa
osv_rhsa
•added 2026/08/20 10:20 a.m.•14 views

RHSA-2026:56973 Red Hat Security Advisory: mysql:8.4 security, bug fix, and enhancement update

Bulletin has no description...

8.4CVSS7.1AI score0.00486EPSS
SaveExploits0References122
osv_rhsa
osv_rhsa
•added 2026/08/20 10:19 a.m.•12 views

RHSA-2026:56936 Red Hat Security Advisory: mysql:8.4 security, bug fix, and enhancement update

Bulletin has no description...

8.4CVSS7.1AI score0.00486EPSS
SaveExploits0References122
osv_rlsa
osv_rlsa
•added 2026/08/20 12:04 a.m.•29 views

RLSA-2026:56973 Important: mysql:8.4 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026...

8.4CVSS7.2AI score0.00486EPSS
SaveExploits0References31
Rockylinux
Rockylinux
•added 2026/08/20 12:04 a.m.•27 views

mysql:8.4 security, bug fix, and enhancement update

An update is available for module.mysql, rapidjson, module.mecab-ipadic, mysql, mecab-ipadic, module.rapidjson, mecab, perl-DBD-MySQL, module.mecab, module.perl-DBD-MySQL. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

8.4CVSS7.2AI score0.00486EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/20 12:00 a.m.•28 views

AlmaLinux 8 : mysql:8.4 (ALSA-2026:56936)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:56936 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-47064...

8.4CVSS7.5AI score0.00486EPSS
SaveExploits0References31
Tenable Nessus
Tenable Nessus
•added 2026/08/20 12:00 a.m.•17 views

RockyLinux 10 : mysql8.4 (RLSA-2026:56007)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56007 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-47064...

8.4CVSS7.5AI score0.00486EPSS
SaveExploits0References59
Tenable Nessus
Tenable Nessus
•added 2026/08/20 12:00 a.m.•21 views

RockyLinux 9 : mysql:8.4 (RLSA-2026:56973)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56973 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-47064...

8.4CVSS7.5AI score0.00486EPSS
SaveExploits0References59
Oracle linux
Oracle linux
•added 2026/08/20 12:00 a.m.•36 views

mysql:8.4 security, bug fix, and enhancement update

mecab 0.996-2.12 - Bump version for 'mysql' module rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo - Resolves: 2180411 0.996-2 - Rebuild to fix the issue described in 2000986 - Resolves: 2000986 0.996-1.9 - Release bump for rebuilding on new arches...

8.4CVSS7.2AI score0.00486EPSS
SaveExploits0
Oracle linux
Oracle linux
•added 2026/08/20 12:00 a.m.•20 views

mysql:8.4 security, bug fix, and enhancement update

mecab 0.996-3.4 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: 2182069 0.996-3.3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz1991688 0.996-3.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related:...

8.4CVSS7.2AI score0.00486EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/20 12:00 a.m.•33 views

Oracle Linux 8 : mysql:8.4 (ELSA-2026-56936)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56936 advisory. mecab 0.996-2.12 - Bump version for 'mysql' module rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo -...

8.4CVSS7.3AI score0.00486EPSS
SaveExploits0References30
Rows per page
Query Builder