Lucene search
+L

51856 matches found

Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•7 views

PT-2025-4240 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: The issue is related to the InnoDB component of MySQL Server, allowing a high-privileged attacker with network...

9.1CVSS6.5AI score0.20202EPSS
SaveExploits3References347
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•12 views

PT-2025-4246 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: A difficult to exploit issue allows a high privileged attacker with logon to the infrastructure where MySQL Server...

9.1CVSS6.6AI score0.20202EPSS
SaveExploits3References333
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•10 views

PT-2025-4247 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description: The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the Server: Thread Pooling componen...

9.1CVSS6.6AI score0.20202EPSS
SaveExploits3References331
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•14 views

PT-2025-4251 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: A vulnerability in the MySQL Server product allows a high privileged attacker with network access via multiple...

9.1CVSS6.5AI score0.20202EPSS
SaveExploits3References349
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•21 views

PT-2025-4253 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: The issue is related to a component called InnoDB in MySQL Server, which can be exploited by an attacker with high...

9.1CVSS6.8AI score0.20202EPSS
SaveExploits3References330
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•16 views

PT-2025-4256 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description: The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the Server: Performance Schema...

9.1CVSS6.8AI score0.20202EPSS
SaveExploits3References331
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•11 views

PT-2025-4258 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description: The issue is related to a component of the MySQL Server product, specifically the Server: Optimizer. It allows a...

9.1CVSS6.6AI score0.20202EPSS
SaveExploits3References332
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•10 views

PT-2025-4262 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: A vulnerability in the MySQL Server product of Oracle MySQL allows a low-privileged attacker with network access v...

9.1CVSS6.6AI score0.20202EPSS
SaveExploits3References350
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•10 views

PT-2025-4265 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: The vulnerability in the MySQL Server product of Oracle MySQL is related to the Server: Packaging component and ca...

9.1CVSS6.6AI score0.20202EPSS
SaveExploits3References333
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•9 views

PT-2025-4268 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: The issue allows a high-privileged attacker with network access via multiple protocols to compromise MySQL Server...

9.1CVSS6.8AI score0.20202EPSS
SaveExploits3References349
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•18 views

PT-2025-4277 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: The issue is related to the InnoDB component of MySQL Server, allowing an attacker with elevated privileges and...

9.1CVSS6.6AI score0.20202EPSS
SaveExploits3References352
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•16 views

PT-2025-4280 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: The issue is related to the InnoDB component of MySQL Server, allowing an attacker with high privileges and networ...

9.1CVSS6.6AI score0.20202EPSS
SaveExploits3References351
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/21 12:00 a.m.•4 views

CVE-2025-21504: Allocation of Resources Without Limits or Throttling

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

4.9CVSS5.6AI score0.01274EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/01/20 3:31 p.m.•31 views

Insecure default config access in WriteFreely

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini...

8.4CVSS6.6AI score0.00207EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2025/01/20 3:31 p.m.•19 views

GHSA-3QC3-MX6X-267H Insecure default config access in WriteFreely

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini...

8.4CVSS8AI score0.00207EPSS
SaveExploits0References5
NVD
NVD
•added 2025/01/20 2:15 p.m.•34 views

CVE-2025-24337

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini...

8.4CVSS0.00207EPSS
SaveExploits0References3
CVE
CVE
•added 2025/01/20 12:00 a.m.•96 views

CVE-2025-24337

CVE-2025-24337 : Affects WriteFreely up to version 0.15.1 when using MySQL. Local users can read the config.ini and disclose credentials due to insecure default config access. The impact is credential disclosure (confidentiality and integrity) for local attackers; exploitation is local. The provi...

8.4CVSS6.9AI score0.00207EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/01/20 12:00 a.m.•29 views

CVE-2025-24337

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini...

8.4CVSS0.00207EPSS
SaveExploits0References3
Mend
Mend
•added 2025/01/20 12:00 a.m.•7 views

CVE-2025-24337

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini...

8.6CVSS0.00207EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/20 12:00 a.m.•5 views

CVE-2025-24337: Improper Preservation of Permissions

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini...

8.4CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Rows per page
Query Builder