4 matches found
mysql: Fix of 3 CVEs
CVE-2017-3636: mysqlaccess no longer loads its configuration file from the current directory BUG25043674 - CVE-2017-3651: mysql client escapes quoted database names in USE BUG25998635 - CVE-2017-10384: reject partition names whose file path exceeds FNREFLEN instead of overflowing stack buffers...
SQL Injection
Apache Hive is vulnerable to SQL Injection. The vulnerability is due to unsanitized partition names being concatenated into direct SQL queries, allowing an authenticated user to alter partition lookups and read, modify, truncate, or affect unintended partition metadata...
CVE-2018-5544
When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages pages with a logon agent or a confirm box, the BIG-IP APM may disclose configuration information such as partition and agent names via URI parameters...
CVE-2018-5544
When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages pages with a logon agent or a confirm box, the BIG-IP APM may disclose configuration information such as partition and agent names via URI parameters...