311 matches found
The vulnerability of the MariaDB database management system, specifically the FTS component of the MySQL database, arises from insufficient validation of input data. This allows attackers to trigger service failures.
The vulnerability of the MariaDB database management system, specifically the FTS component of the MySQL database, is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger service failures using the MySQL protocol...
sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query
A NULL pointer dereference flaw was found in the matchinfo auxiliary function of the SQLite FTS3 extension module. This flaw allows an attacker who can execute SQL statements to crash the application, resulting in a denial of service...
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
...
The vulnerability of the FTS3 extension of the SQLite database management system allows a hacker to execute arbitrary code.
The vulnerability of the FTS3 extension of the SQLite database management system arises from a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59071)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: FTS component of Oracle MySQL Server 5.6.49, 5.7.31, 8.0.21 and earlier versions. An attacker can...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58243)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: FTS component of Oracle MySQL Server 5.7.31, 8.0.21 and earlier versions. An attacker can exploit this...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58242)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: FTS component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...
ALPINE-CVE-2020-14765
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
UBUNTU-CVE-2020-14789
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
UBUNTU-CVE-2020-14804
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...
Fedora: Security Advisory for lucene (FEDORA-2020-cf8ef2f333)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 32 Update: lucene-8.4.1-9.fc32
Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology suitable for nearly any application that requires full-text search, especially cross-platform...
OPENSUSE-SU-2020:1227-1 Security update for postgresql96, postgresql10 and postgresql12
This update for postgresql96, postgresql10 and postgresql12 fixes the following issues: postgresql10 was updated to 10.13 bsc1171924. https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/10/release-10-13.html postgresql10 was updated to 10.12 CVE-2020-1720, bsc1163985 -...
Couchbase Sync Gateway and Couchbase Server Denial of Service Vulnerabilities
Couchbase Sync Gateway and Couchbase Server are both products of Couchbase Inc. Couchbase Sync Gateway is a secure web gateway for data access and data synchronization over the web.Couchbase Server is a distributed open source Couchbase Server is a distributed open-source NoSQL non-relational...
CVE-2020-9041
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections...
Design/Logic Flaw
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections...
CVE-2020-9041
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections...
CVE-2020-9041: Improper Resource Shutdown or Release
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections...
The vulnerability of the FTS3 virtual table module in the SQLite database management system allows a hacker to execute arbitrary code.
The vulnerability of the FTS3 virtual table module in the SQLite database management system is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...