[SECURITY] Fedora 26 Update: php-horde-kronolith-4.2.22-1.fc26

Kronolith is the Horde calendar application. It provides web-based calendars backed by a SQL database or a Kolab server. Supported features include Ajax and mobile interfaces, shared calendars, remote calendars, invitation management iCalendar/iTip, free/busy management, resource management,...

[SECURITY] Fedora 25 Update: community-mysql-5.7.19-1.fc25

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

RHEL 7 : mariadb (RHSA-2017:2192)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2192 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded ...

[SECURITY] Fedora 24 Update: sqlite-3.13.0-2.fc24

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

[SECURITY] Fedora 26 Update: sqlite-3.19.3-1.fc26

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

[SECURITY] Fedora 26 Update: openvas-manager-7.0.2-1.fc26

The OpenVAS Manager is the central service that consolidates plain vulnerab ility scanning into a full vulnerability management solution. The Manager control s the Scanner via OTP and itself offers the XML-based, stateless OpenVAS Manageme nt Protocol OMP. All intelligence is implemented in the...

dpp.gov.bd Improper Access Control vulnerability

Vulnerable URL: http://www.dpp.gov.bd/bfpo/wcmsdb.sql Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| Improper Access Control Vulnerability status:| Publicly disclosed Alexa Rank| 301615 VIP website status:| No Check dpp.gov.bd SSL...

CVE-2017-6698

CVE-2017-6698 describes a SQL injection due to inadequate input validation in Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface. An authenticated, remote attacker can send crafted URLs to execute arbitrary SQL queries, compromising confidential...

[SECURITY] Fedora 25 Update: mariadb-10.1.24-3.fc25

MariaDB is a community developed branch of MySQL. MariaDB is a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client...

How to check Deadlocks in SQL DB and Delete historical data

When you see deadlocks, run the following query to see the deadlocks. Then, a database administrator or Microsoft SQL team can confirm the information...

[SECURITY] Fedora 25 Update: community-mysql-5.7.18-2.fc25

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

[SECURITY] Fedora 26 Update: community-mysql-5.7.18-2.fc26

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

Zabbix Proxy Server SQL Database Write Vulnerability (CVE-2017-2825)

Official patch earlier to fix the vulnerabilities: the Zabbix code execution vulnerability DETAILS One of the Trapper requests made by the Zabbix proxy is the ìproxy configî request, which allows a proxy to request its own proxy configuration from the Zabbix Server or any other Zabbix Proxyís...

Sql injection

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries, aka SQL Injection. The attacker must be authenticated as an administrative user to execute SQL...

How to Enable App Interaction Between XenMobile Secure Mail and Microsoft Office Apps

This document will help you understand how the XenMobile managed Secure Mail application will use Microsoft Office application to open the attachments in a controlled and secured manner. Environment Machine| Details ---|--- Active Directory| Win 2012 Certificate Authority| NA SQL Database| MS SQL...

Code injection

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and...

CVE-2016-8355

The CVE-2016-8355 entry documents an elevation-of-privilege flaw in Smiths-Medical CADD-Solis Medication Safety Software (versions 1.0–3.1). An authenticated user can gain elevated privileges on the embedded SQL database, enabling modification of drug libraries, user management (add/delete users)...

CVE-2016-8355

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and...

Best Practices for deploying PVS in multi-geo environments

In scenarios where companies have a Global presence with multiple geographical locations, it is sometimes desirable to have a Provisioning Services Farm that spans multiple locations across the globe. PVS requires a constant andreliable connection to the SQL database. If there's a delay in...

CentOS 6 : mysql (CESA-2017:0184)

The remote CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2017:0184 advisory. - Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17;...