Astra Linux – Vulnerability in Mariadb 10.3

MariaDB version 10.5.9 allows an application crash in the findfieldintables and findorderinlist functions due to an unused common table expression CTE...

CVE-2025-15450

Summary: CVE-2025-15450 affects the sfturing hosp_order component (function findOrderHosNum) in /ssm_pro/orderHos/, where manipulation of hospitalAddress/hospitalName can trigger SQL injection. The vulnerability is remotely exploitable and a public exploit exists; affected versions are not clearl...

CVE-2022-29940

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\findorderpopup.php leads to multiple cross-site scripting XSS vulnerabilities...

Cross-Site Scripting (XSS)

pimcore/pimcore is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to a lack of user input sanitization in the Edit parameter of the Find & Order feature, which allows an attacker to inject arbitrary JavaScript code into a browser...

mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE)

MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression CTE...

mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE)

MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression CTE...

PT-2022-19924

Name of the Vulnerable Software and Affected Versions LibreHealth EHR version 2.0.0 Description The issue is related to a lack of sanitization of the GET parameters formseq and formid in the "interface/orders/find order popup.php" endpoint, leading to multiple cross-site scripting XSS...

MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).

...

MariaDB DoS Vulnerability (MDEV-25766) - Windows

MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...