766 matches found
Sql injection
Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql database access. The component is: Web login form. The attack vector is: An attacker can exploit the vulnerability by sending a malicious HTTP POST request. The fixed version is: 1.12.1...
CVE-2019-1010248
Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql database access. The component is: Web login form. The attack vector is: An attacker can exploit the vulnerability by sending a malicious HTTP POST request. The fixed version is: 1.12.1...
Fedora Update for community-mysql FEDORA-2019-6a8a9efc40
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-10855
Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database...
Default credentials
Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database...
CVE-2019-10855
Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database...
Vulnerability of the Server component: Security: Privileges of the MySQL database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server component: Security: Privileges of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability may allow a malicious actor to cause service interruptions using the MySQL protocol...
Vulnerability of the Server component: Security: Privileges of the MySQL database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server component: Security: Privileges of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Vulnerability of the Server component: The DDL system for database management in MySQL, which allows a hacker to cause a service failure.
The vulnerability of the Server component: The DDL system for database management in MySQL is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
UBUNTU-CVE-2019-2683
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Options. Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols ...
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-12453)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.15 and earlier. An...
PT-2019-1923 · Oracle +6 · Mysql Server +5
Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.15 and prior Description: A vulnerability in the MySQL Server component, specifically in the InnoDB subcomponent, allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL...
Jfinal cms backend has arbitrary file read vulnerability
Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Jfinal cms backend exists arbitrary file read vulnerability. Attackers can use the vulnerability to read the database configuration file...
File Upload Vulnerability in metinfo Mito System
metinfo mito system is an enterprise website management system with PHP Mysql architecture. A file upload vulnerability exists in metinfo Mito System, which can be exploited by attackers to upload arbitrary files...
The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.
The vulnerability of the InnoDB component in the MySQL Database Management System is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the InnoDB component of the MySQL database management system, which allows a hacker to alter file access rights or cause service interruptions.
The vulnerability of the InnoDB component in the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow an attacker to modify file access rights or cause service interruptions...
Vulnerability of the Server component: Security: Database management system MySQL roles, which allow a hacker to cause a service failure
The vulnerability of the Server component: Security: Roles of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability may allow a malicious actor to cause service interruptions...
The vulnerability of the InnoDB component of the MySQL database management system, which allows a hacker to cause a service failure
The vulnerability of the InnoDB component in the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Vulnerability of the Server component: DML operations of the MySQL database management system, which allows attackers to cause service interruptions.
The vulnerability of the Server component: The DML mechanism of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Vulnerability of the Server component: Connection Handling in the MySQL database management system, which allows attackers to cause service interruptions.
The vulnerability of the Server: Connection Handling component of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...