17937 matches found
CVE-2020-11579
CVE-2020-11579 Introduction PHPKB 9.0 Enterprise Edition MySQL database is affected by an unauthenticated arbitrary file disclosure via a malicious MySQL Server. A remote attacker can read any file on a remote victim host with web-server privileges e.g. www-data, via a single HTTP GET request. Re...
CVE-2024-34693
CVE-2024-34693: Server Arbitrary File Read in Apache Superset Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with localinfile enabled. By enabling localinfile in the Superset MySQL/MariaDB client and pointing the...
Rogue-MySql-Server
Rogue-MySql-Server Edit script and change file to read and server port if you want. Run script and connect to your server for read file from client side. Read mysql.log for readed file content...
CVE-2026-34308
CVE-2026-34308: MySQL Server JSON component denial of service Official vendor bulletin: Oracle Critical Patch Update Advisory — April 2026. Summary from published CVE Vulnerability in Oracle MySQL Server component: Server: JSON. Supported affected versions: 8.0.0–8.0.45 , 8.4.0–8.4.8 , and...
Adminer-CVE-2021-43008
Adminer CVE-2021-43008 PoC Proof-of-concept exploit for CVE-2021-43008 affecting Adminer. This vulnerability allows a malicious MySQL server to request arbitrary local files from the client machine when LOAD DATA LOCAL INFILE is enabled. The repository contains tools to reproduce the attack...
mysql: MySQL: Denial of Service via JSON component
A flaw was found in the JSON component of MySQL Server and MySQL Cluster. A remote attacker with low-level privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service DoS of the...
mysql: mysql: Denial of service via DDL component
A flaw was found in the Data Definition Language DDL component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. This flaw primarily results in a complete denial of...
mysql: MySQL Server: Denial of service in the Server Optimizer
A flaw was found in the MySQL Server Optimizer. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the server to hang or crash repeatedly. This issue results in a complete denial of service DoS for the database service...
mysql: mysql: Denial of Service via Server Optimizer component
A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the database server to hang or repeatedly crash. This issue results in a complete Denial of Service DoS of affected MySQL Server and MySQ...
mysql: mysql: Denial of service in query optimizer
A flaw was found in the query optimizer component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause a Denial of Service DoS. Successful exploitation allows the attacker to hang or repeatedly crash the...
mysql: mysql: Denial of Service via Server Components Services
A flaw was found in MySQL Server and MySQL Cluster within the Server Components Services. This vulnerability allows an unauthenticated remote attacker with network access via multiple protocols to cause a Denial of Service DoS. A successful attack can cause the database server to hang or repeated...
mysql: mysql: Denial of service via DDL component
A flaw was found in the Data Definition Language DDL component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. This flaw primarily results in a complete denial of...
mysql: MySQL Server: Denial of service in the Server Optimizer
A flaw was found in the MySQL Server Optimizer. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the server to hang or crash repeatedly. This issue results in a complete denial of service DoS for the database service...
mysql: mysql: Denial of Service via Server Components Services
A flaw was found in MySQL Server and MySQL Cluster within the Server Components Services. This vulnerability allows an unauthenticated remote attacker with network access via multiple protocols to cause a Denial of Service DoS. A successful attack can cause the database server to hang or repeated...
mysql: MySQL: Denial of Service via JSON component
A flaw was found in the JSON component of MySQL Server and MySQL Cluster. A remote attacker with low-level privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service DoS of the...
mysql: mysql: Denial of service in query optimizer
A flaw was found in the query optimizer component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause a Denial of Service DoS. Successful exploitation allows the attacker to hang or repeatedly crash the...
mysql: mysql: Partial Denial of Service via Telemetry component
A flaw was found in the MySQL Server Telemetry component. A remote attacker with high privileges and network access can exploit this vulnerability over multiple protocols to cause a partial Denial of Service DoS. Successful exploitation can lead to unauthorized degradation of database service...
mysql: mysql: Denial of Service via Server Optimizer component
A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the database server to hang or repeatedly crash. This issue results in a complete Denial of Service DoS of affected MySQL Server and MySQ...
adminer_CVE-2021-43008
CVE-2021-43008 — Adminer Vulnerability Arbitrary file reading via a malicious MySQL server 1. What is Adminer? Adminer is a web tool PHP for easily administering MySQL, PostgreSQL, SQLite or SQL Server databases. It is commonly deployed as a lightweight alternative to phpMyAdmin. Affected...
CVE-2026-27876
CVE-2026-27876: Grafana SQL Expressions Arbitrary File Write to RCE CVSS 9.1 Critical | Arbitrary File Write | Remote Code Execution Demo https://github.com/user-attachments/assets/c84a4b63-7928-4dba-a069-3bafa036ce56 Summary Grafana's SQL Expressions feature sqlExpressions toggle uses an...