Lucene search
K

6026 matches found

OpenVAS
OpenVAS
added 2020/11/06 12:0 a.m.21 views

phpMyAdmin < 4.9.6, 5.x < 5.0.3 Multiple Vulnerabilities (PMASA-2020-5, PMASA-2020-6) - Linux

phpMyAdmin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin"; if...

9.8CVSS9.6AI score0.89641EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/11/06 12:0 a.m.17 views

phpMyAdmin <= 5.1.1 CSV Injection Vulnerability - Linux

phpMyAdmin is prone to a CSV injection vulnerability via Export Section. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS8.8AI score0.00409EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2020/11/06 12:0 a.m.30 views

openSUSE Security Update : phpMyAdmin (openSUSE-2020-1806)

This update for phpMyAdmin fixes the following issues : phpMyAdmin was updated to 4.9.7 boo1177842 : - Fix two factor authentication that was broken in 4.9.6 - Fix incompatibilities with older PHP versions Update to 4.9.6 : - Fixed XSS relating to the transformation feature boo1177561...

9.8CVSS7.4AI score0.89641EPSS
Exploits1References11
OpenVAS
OpenVAS
added 2020/11/06 12:0 a.m.26 views

phpMyAdmin < 4.9.6, 5.x < 5.0.3 Multiple Vulnerabilities (PMASA-2020-5, PMASA-2020-6) - Windows

phpMyAdmin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin"; if...

9.8CVSS9.6AI score0.89641EPSS
Exploits1References2
CNVD
CNVD
added 2020/11/05 12:0 a.m.1 views

phpMyAdmin CSV Injection Vulnerability

phpMyAdmin is a free, web-based MySQL database management tool from the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A CSV injection vulnerability exists in phpMyAdmin 5.0.2 and...

8.8CVSS8.5AI score0.00409EPSS
Exploits1References1
NVD
NVD
added 2020/11/04 5:15 p.m.10 views

CVE-2020-22278

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

8.8CVSS8.9AI score0.00409EPSS
Exploits1References2
OSV
OSV
added 2020/11/04 5:15 p.m.6 views

CVE-2020-22278

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

8.8CVSS8.8AI score0.00409EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2020/11/04 5:15 p.m.27 views

CVE-2020-22278

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

8.8CVSS7.2AI score0.00409EPSS
Exploits1References3
Prion
Prion
added 2020/11/04 5:15 p.m.15 views

Design/Logic Flaw

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

6.8CVSS8.9AI score0.00409EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2020/11/04 5:15 p.m.0 views

UBUNTU-CVE-2020-22278

DISPUTED phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents."...

8.8CVSS7.3AI score0.00409EPSS
Exploits1References4
Cvelist
Cvelist
added 2020/11/04 4:52 p.m.12 views

CVE-2020-22278

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

8.9AI score0.00409EPSS
Exploits1References2
CVE
CVE
added 2020/11/04 4:52 p.m.57 views

CVE-2020-22278

Summary (CVE-2020-22278): phpMyAdmin up to 5.0.2 is listed as vulnerable to a CSV injection via the Export feature. The description notes the vendor disputes this claim by stating that the CSV is generated from database contents (i.e., the data itself, not the export process, is called out). The ...

8.8CVSS8.8AI score0.00409EPSS
Exploits1References2Affected Software1
OpenVAS
OpenVAS
added 2020/11/03 12:0 a.m.24 views

openSUSE: Security Advisory for phpMyAdmin (openSUSE-SU-2020:1806-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7.1AI score0.89641EPSS
Exploits1References2
OSV
OSV
added 2020/11/01 11:23 a.m.7 views

OPENSUSE-SU-2020:1806-1 Security update for phpMyAdmin

This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.7 boo1177842: Fix two factor authentication that was broken in 4.9.6 Fix incompatibilities with older PHP versions Update to 4.9.6: - Fixed XSS relating to the transformation feature boo1177561 CVE-2020-26934,...

9.8CVSS7.2AI score0.89641EPSS
Exploits1References12
OPENSUSE Linux
OPENSUSE Linux
added 2020/11/01 12:0 a.m.61 views

Security update for phpMyAdmin (important)

openSUSE Security Update: Security update for phpMyAdmin Announcement ID: openSUSE-SU-2020:1806-1 Rating: important References: 1167335 1167336 1167337 1177561 1177562 1177842 Cross-References: CVE-2020-10802 CVE-2020-10803 CVE-2020-10804 CVE-2020-26934 CVE-2020-26935 Affected Products: openSUSE...

9.8CVSS9AI score0.89641EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2020/10/26 12:0 a.m.41 views

Debian DLA-2413-1 : phpmyadmin security update

Several vulnerabilities were found in package phpmyadmin. CVE-2019-19617 phpMyAdmin does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes /Footer.php. CVE-2020-26934 A vulnerability was discovered where an attacker can cause an XSS...

9.8CVSS7.7AI score0.89641EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2020/10/26 12:0 a.m.42 views

Fedora 33 : phpMyAdmin (2020-43d8624421)

Version 5.0.3 2020-10-09 - issue 15983 Require twig ^2.9 - issue Fix option to import files locally appearing as not available - issue 16048 Fix to allow NULL as a default bit value - issue 16062 Fix 'htmlspecialchars expects parameter 1 to be string, null given' on Export xml - issue 16078 Fix n...

9.8CVSS7.6AI score0.89641EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2020/10/26 12:0 a.m.23 views

Debian: Security Advisory (DLA-2413-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.89641EPSS
Exploits1References4
Debian
Debian
added 2020/10/25 11:25 a.m.81 views

[SECURITY] [DLA 2413-1] phpmyadmin security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2413-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA October 25, 2020 https://wiki.debian.org/LTS -...

9.8CVSS9.2AI score0.89641EPSS
Exploits1
OSV
OSV
added 2020/10/25 12:0 a.m.24 views

DLA-2413-1 phpmyadmin - security update

Bulletin has no description...

9.8CVSS7.8AI score0.89641EPSS
Exploits1
Rows per page
Query Builder