Lucene search
K

8 matches found

Vulnrichment
Vulnrichment
added 2025/10/09 1:15 p.m.1 views

CVE-2025-62228 Apache Flink CDC, Apache Flink CDC, Apache Flink CDC, Apache Flink CDC, Apache Flink CDC: SQL injection via maliciously crafted identifiers

Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, we recommend users update Flink CDC version to 3.5.0 which address this issue...

5.1CVSS7.5AI score0.00037EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.2 views

PT-2025-41380

Name of the Vulnerable Software and Affected Versions Apache Flink CDC version 3.4.0 Description The software is susceptible to a SQL injection due to maliciously crafted identifiers, such as a crafted database name or table name. The attack can only be triggered by a logged-in database user...

8.8CVSS7.4AI score0.00037EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-3684

Malicious code in bioql PyPI...

8CVSS8.7AI score0.01229EPSS
Exploits0References18
OSV
OSV
added 2025/01/23 6:15 a.m.0 views

DEBIAN-CVE-2025-24530

An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted table or database name could be used for XSS...

6.4CVSS8.1AI score0.00305EPSS
Exploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.1 views

DEBIAN-CVE-2016-6608

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...

6.1CVSS6.5AI score0.00317EPSS
Exploits0References1
Prion
Prion
added 2016/12/11 2:59 a.m.18 views

Cross site scripting

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...

4.3CVSS6AI score0.00317EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2012/01/09 12:0 a.m.14 views

Mandriva Update for phpmyadmin MDVSA-2011:198 (phpmyadmin)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.5CVSS7.6AI score0.12434EPSS
Exploits11References2
NVD
NVD
added 2011/12/22 8:55 p.m.15 views

CVE-2011-4634

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted database name, related to the Database Synchronize panel; 2 a crafted database name, related to the Database rename panel; 3 a crafted S...

4.3CVSS6.1AI score0.00421EPSS
Exploits1References7
Rows per page
Query Builder