Lucene search
K

143 matches found

Fedora
Fedora
added 2017/01/29 12:23 a.m.42 views

[SECURITY] Fedora 25 Update: pdns-4.0.3-1.fc25

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

7.8CVSS1.4AI score0.07294EPSS
Exploits0
Gentoo Linux
Gentoo Linux
added 2017/01/23 12:0 a.m.82 views

DBD::mysql: Multiple vulnerabilities

Background MySQL driver for the Perl5 Database Interface DBI Description Multiple vulnerabilities have been discovered in DBD::mysql. Please review the CVE identifiers referenced below for details. Impact An attacker could cause a Denial of Service condition, execute arbitrary code, or have other...

10CVSS8.1AI score0.04485EPSS
Exploits0
Fedora
Fedora
added 2016/12/13 12:2 a.m.32 views

[SECURITY] Fedora 25 Update: perl-DBD-MySQL-4.041-1.fc25

DBD::mysql is the Perl5 Database Interface driver for the MySQL database. In other words: DBD::mysql is an interface between the Perl programming langua ge and the MySQL programming API that comes with the MySQL relational database management system...

8.1CVSS1.9AI score0.03118EPSS
Exploits0
Fedora
Fedora
added 2016/12/10 12:29 a.m.33 views

[SECURITY] Fedora 24 Update: perl-DBD-MySQL-4.039-2.fc24

DBD::mysql is the Perl5 Database Interface driver for the MySQL database. In other words: DBD::mysql is an interface between the Perl programming langua ge and the MySQL programming API that comes with the MySQL relational database management system...

8.1CVSS1.9AI score0.03118EPSS
Exploits0
OSV
OSV
added 2016/11/29 8:59 p.m.7 views

CVE-2016-1251

There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI MySQL driver for Perl 3.x and 4.x before 4.041 when used with mysqlserverprepare=1...

8.1CVSS8AI score
Exploits0References6
Prion
Prion
added 2016/11/29 8:59 p.m.17 views

Design/Logic Flaw

There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI MySQL driver for Perl 3.x and 4.x before 4.041 when used with mysqlserverprepare=1...

6.8CVSS7AI score0.03118EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2016/10/27 9:0 p.m.26 views

CVE-2016-6443

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability. More Information:...

8.6AI score0.02975EPSS
Exploits0References3
CVE
CVE
added 2016/10/27 9:0 p.m.50 views

CVE-2016-6443

CVE-2016-6443 affects Cisco Prime Infrastructure and Evolved Programmable Network Manager (EPNM) with a SQL database interface vulnerability. The issue is a lack of input validation in SQL queries, allowing an authenticated, remote attacker to execute a subset of arbitrary SQL statements that can...

8.8CVSS8.6AI score0.02975EPSS
Exploits0References3Affected Software2
Fedora
Fedora
added 2016/10/19 5:23 p.m.35 views

[SECURITY] Fedora 23 Update: perl-DBD-MySQL-4.033-3.fc23

DBD::mysql is the Perl5 Database Interface driver for the MySQL database. In other words: DBD::mysql is an interface between the Perl programming langua ge and the MySQL programming API that comes with the MySQL relational database management system...

7.5CVSS1.9AI score0.0406EPSS
Exploits0
Fedora
Fedora
added 2016/10/12 11:27 p.m.45 views

[SECURITY] Fedora 24 Update: perl-DBD-MySQL-4.037-1.fc24

DBD::mysql is the Perl5 Database Interface driver for the MySQL database. In other words: DBD::mysql is an interface between the Perl programming langua ge and the MySQL programming API that comes with the MySQL relational database management system...

7.5CVSS1.9AI score0.0406EPSS
Exploits0
Fedora
Fedora
added 2015/09/27 3:28 a.m.29 views

[SECURITY] Fedora 22 Update: pdns-3.4.6-1.fc22

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

7.5CVSS1.4AI score0.09021EPSS
Exploits0
OSV
OSV
added 2014/10/16 12:55 a.m.3 views

UBUNTU-CVE-2014-3704

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys...

7.5CVSS7AI score0.99974EPSS
Exploits20References5
Prion
Prion
added 2014/02/13 5:24 a.m.20 views

Sql injection

SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager UCM 10.01 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05313...

7.5CVSS8.9AI score0.01962EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2014/02/13 2:0 a.m.24 views

CVE-2014-0728

SQL injection vulnerability in the Java database interface in Cisco Unified Communications Manager UCM 10.01 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05313...

8.3AI score0.01962EPSS
Exploits0References4
Packet Storm
Packet Storm
added 2010/11/09 12:0 a.m.29 views

WordPress Database Interface Toolkit 0.1.7 Shell Upload

------------------------------------------------------------------------ Software................WordPress Database Interface Toolkit 0.1.7 Vulnerability...........Arbitrary Upload Download................http://dbtoolkit.digilab.co.za/ Release Date............11/5/2010 Tested...

0.1AI score
Exploits0
Positive Technologies
Positive Technologies
added 2010/10/28 12:0 a.m.5 views

PT-2010-5313 · Ibm +1 · Ibm Tivoli Provisioning Manager For Os Deployment +1

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Provisioning Manager for OS Deployment version 7.1.1.3 Description: The TCP-to-ODBC gateway does not require authentication for SQL statements, allowing remote attackers to modify, create, or read database records via a session on...

7.5CVSS7.4AI score0.03222EPSS
Exploits0References5
Prion
Prion
added 2009/04/27 6:0 p.m.15 views

Design/Logic Flaw

The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file...

4.9CVSS6.2AI score0.00892EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2008/09/18 3:4 p.m.18 views

CVE-2008-4096

libraries/databaseinterface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to serverdatabases.php with a sortby parameter containing PHP sequences, which are processed by createfunction...

8.5CVSS5.9AI score0.11175EPSS
Exploits1References24
UbuntuCve
UbuntuCve
added 2008/09/18 3:4 p.m.23 views

CVE-2008-4096

libraries/databaseinterface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to serverdatabases.php with a sortby parameter containing PHP sequences, which are processed by createfunction...

8.5CVSS6.2AI score0.11175EPSS
Exploits1References1
Cvelist
Cvelist
added 2008/09/17 6:6 p.m.33 views

CVE-2008-4096

libraries/databaseinterface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to serverdatabases.php with a sortby parameter containing PHP sequences, which are processed by createfunction...

6.1AI score0.11175EPSS
Exploits1References24
Rows per page
Query Builder