Lucene search
+L

46900 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/06 12:00 a.m.8 views

FreeBSD : MySQL 9.7 -- Multiple vulnerabilities (10f5f76e-90a5-11f1-bc30-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10f5f76e-90a5-11f1-bc30-3497f65b111b advisory. The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 43 of which...

8.4CVSS5.8AI score0.00453EPSS
SaveExploits0References46
Tenable Nessus
Tenable Nessus
added 2026/08/06 12:00 a.m.11 views

FreeBSD : MySQL 8.4 -- Multiple vulnerabilities (10f5d195-90a5-11f1-bc30-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 10f5d195-90a5-11f1-bc30-3497f65b111b advisory. The Oracle Critical Patch Update of July 2026 addresses 54 issues in Oracle MySQL, 31 of which...

8.4CVSS5.7AI score0.00453EPSS
SaveExploits0References34
EUVD
EUVD
added 2026/08/05 2:42 p.m.15 views

EUVD-2026-39020

Ghost Content API filter bypass reveals private fields...

5.3CVSS5.4AI score0.00214EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/05 10:56 a.m.9 views

CVE-2026-71237

Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from $POST'pwd' with no sanitization and concatenates it into a raw SQL string: mysqlquery"select from userlists where username='$username' and password='$password' limit 1". The username value is...

9.8CVSS5.9AI score0.0042EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/05 6:38 a.m.8 views

CVE-2026-5651

The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sqlquery' parameter in multiple AJAX actions askeetexecutesqlquery, askeetexportallresults in all versions up to, and including, 3.0. This is due to the askeetissafequery filter being bypassable using MySQL conditional commen...

4.9CVSS5.8AI score0.00378EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.10 views

Photon OS 5.0: Mysql PHSA-2026-5.0-92-0842

An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0842. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

6.5CVSS5.4AI score0.00323EPSS
SaveExploits2References10
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.12 views

Photon OS 5.0: Mysql PHSA-2023-5.0-91-0056

An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0056. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.8CVSS6.7AI score0.09116EPSS
SaveExploits0References14
OSV
OSV
added 2026/08/04 2:52 p.m.6 views

CLSA-2025-1765930332 TuxCare security update for mysql-connector-python (4 CVEs)

TuxCare rebuilt mysql-connector-python to address 4 CVEs. Fixed in 8.4.0.post1+tuxcare...

9.8CVSS6.9AI score0.03399EPSS
SaveExploits0
OSV
OSV
added 2026/08/04 1:01 p.m.15 views

MAL-2026-12018 Malicious code in @keyv/mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e7b09271ef0584c4ab876898b9cb09c6cc8a0408bd4bbb7d623726d12c392e @keyv/mysql is the MySQL storage adapter for the keyv key-value abstraction. No exfiltration, install-time fetch-and-execute, silent-relay, credentia...

5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/04 1:01 p.m.15 views

Malicious code in @keyv/mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e7b09271ef0584c4ab876898b9cb09c6cc8a0408bd4bbb7d623726d12c392e @keyv/mysql is the MySQL storage adapter for the keyv key-value abstraction. No exfiltration, install-time fetch-and-execute, silent-relay, credentia...

5.6AI score
SaveExploits0References2
Photon
Photon
added 2026/08/04 12:00 a.m.27 views

Important Photon OS Security Update - PHSA-2026-5.0-92-0940

Updates of 'mysql' packages of Photon OS have been released...

8.4CVSS5.5AI score0.00471EPSS
SaveExploits0
Photon
Photon
added 2026/08/04 12:00 a.m.26 views

Important Photon OS Security Update - PHSA-2026-5.0-0940

Updates of 'mysql' packages of Photon OS have been released...

8.4CVSS7.1AI score0.00431EPSS
SaveExploits0
Photon
Photon
added 2026/07/31 12:00 a.m.24 views

Important Photon OS Security Update - PHSA-2026-5.0-90-0937

Updates of 'mysql' packages of Photon OS have been released...

7.5CVSS7.2AI score0.00463EPSS
SaveExploits0
Photon
Photon
added 2026/07/31 12:00 a.m.26 views

Important Photon OS Security Update - PHSA-2026-5.0-0937

Updates of 'mysql' packages of Photon OS have been released...

7.5CVSS7.2AI score0.00463EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/30 9:10 p.m.16 views

EUVD-2026-51312

Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...

4.7CVSS5.9AI score0.00196EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/30 9:10 p.m.8 views

CVE-2026-62845 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers

Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...

4.7CVSS5.7AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/30 9:10 p.m.8 views

CVE-2026-62845

Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...

4.7CVSS5.9AI score0.00196EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/07/30 9:10 p.m.41 views

CVE-2026-62845 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers

Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...

4.7CVSS0.00196EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/30 9:10 p.m.33 views

CVE-2026-62845

Kamaji (Hosted Control Plane Manager for Kubernetes) is affected by a SQL injection in the PostgreSQL and MySQL datastore drivers. The root cause is that DataStoreUsername and DataStoreSchema are interpolated into SQL statements via fmt.Sprintf without escaping identifiers, and these fields have ...

4.7CVSS5.9AI score0.00196EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/30 4:39 p.m.7 views

SUSE CVE-2026-55170

OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorizationmodel identifier columns can compare case-distinct values such as...

5.4CVSS7.6AI score0.00248EPSS
SaveExploits0References2
Rows per page
Query Builder