Lucene search
K

46061 matches found

OSV
OSV
added 2026/05/03 9:56 a.m.18 views

OESA-2026-2153 mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fixes:...

6.5CVSS7.2AI score0.00323EPSS
Exploits0References25
CloudLinux
CloudLinux
added 2026/05/02 12:59 a.m.6 views

mysql: Fix of CVE-2018-2755

CVE-2018-2755: harden binlog event decoding against corrupt binary log files BUG24365972...

7.7CVSS6.8AI score0.00848EPSS
Exploits0
OSV
OSV
added 2026/05/02 12:59 a.m.14 views

CLSA-2026-1777683582 mysql: Fix of CVE-2018-2755

CVE-2018-2755: harden binlog event decoding against corrupt binary log files BUG24365972...

7.7CVSS6.6AI score0.00848EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2026/05/01 4:44 a.m.103 views

Metasploitable2-VAPT

Internal Host VAPT Assessment | Kali Linux + Metasploitable2...

6.5AI score
Exploits0
SUSE CVE
SUSE CVE
added 2026/05/01 2:11 a.m.11 views

SUSE CVE-2026-6524

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.00124EPSS
Exploits1References4
RustSec
RustSec
added 2026/04/30 12:0 p.m.10 views

Unsound access to padding bytes while serializing date/time values using the Mysql backend

Diesel-async uses the mysql-async crate for interacting with Mysql compatible databases. This library already provides access to deserialized data for date/time releated types. Diesel-async then translated these deserialized data back to their serialized binary representation to hook into diesels...

5.8AI score
Exploits0Affected Software1
OSV
OSV
added 2026/04/30 12:0 p.m.4 views

RUSTSEC-2026-0138 Unsound access to padding bytes while serializing date/time values using the Mysql backend

Diesel-async uses the mysql-async crate for interacting with Mysql compatible databases. This library already provides access to deserialized data for date/time releated types. Diesel-async then translated these deserialized data back to their serialized binary representation to hook into diesels...

5.8AI score
Exploits0References3
NVD
NVD
added 2026/04/30 7:16 a.m.4 views

CVE-2026-6524

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS0.00124EPSS
Exploits1References2
OSV
OSV
added 2026/04/30 7:16 a.m.4 views

UBUNTU-CVE-2026-6524

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00124EPSS
Exploits1References4
AlpineLinux
AlpineLinux
added 2026/04/30 5:34 a.m.9 views

CVE-2026-6524

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00124EPSS
Exploits1References2
EUVD
EUVD
added 2026/04/30 5:34 a.m.3 views

EUVD-2026-26332

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00124EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/30 5:34 a.m.5 views

CVE-2026-6524

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00124EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2026/04/30 5:34 a.m.14 views

CVE-2026-6524

The CVE-2026-6524 entry documents a crash in Wireshark’s MySQL protocol dissector, affecting Wireshark versions 4.6.0–4.6.4 and 4.4.0–4.4.14 due to an access of an uninitialized pointer, leading to denial of service. The affected component is the MySQL protocol dissector; the exact root cause is ...

5.5CVSS5.2AI score0.00124EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/30 5:34 a.m.6 views

CVE-2026-6524 Access of Uninitialized Pointer in Wireshark

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00124EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/04/30 5:34 a.m.32 views

CVE-2026-6524 Access of Uninitialized Pointer in Wireshark

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS0.00124EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2026/04/30 5:34 a.m.4 views

CVE-2026-6524

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00124EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2026/04/30 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-6524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-6524 Note that Nessus relies on the presence of...

5.5CVSS5.8AI score0.00124EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/04/30 12:0 a.m.6 views

Wireshark 缓冲区错误漏洞

Wireshark is a set of network packet analysis tools developed by the Wireshark team. The software’s function is to capture network packets and display detailed data for analysis. Versions of Wireshark from 4.6.0 to 4.6.4, as well as 4.4.0 to 4.4.14, have a buffer error vulnerability. This...

5.5CVSS6AI score0.00124EPSS
Exploits1References1
OSV
OSV
added 2026/04/29 9:3 p.m.3 views

GHSA-HP3C-VFPM-Q4F7 n8n has SQL Injection in Snowflake and MySQL Nodes

Impact The fix for GHSA-f3f2-mcxc-pwjx did not cover the Snowflake node or the legacy MySQL v1 node. Both nodes construct SQL queries by directly interpolating user-controlled table names, column names, and update keys into query strings without identifier escaping, enabling SQL injection against...

8.2CVSS5.8AI score0.00254EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/04/29 9:3 p.m.8 views

n8n has SQL Injection in Snowflake and MySQL Nodes

Impact The fix for GHSA-f3f2-mcxc-pwjx did not cover the Snowflake node or the legacy MySQL v1 node. Both nodes construct SQL queries by directly interpolating user-controlled table names, column names, and update keys into query strings without identifier escaping, enabling SQL injection against...

8.8CVSS5.8AI score0.00254EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder