Lucene search
+L

6030 matches found

AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.50 views

CVE-2016-6623

An issue was discovered in phpMyAdmin. An authorized user can cause a denial-of-service DoS attack on a server by passing large values to a loop. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS7.8AI score0.01693EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.57 views

CVE-2016-6618

An issue was discovered in phpMyAdmin. The transformation feature allows a user to trigger a denial-of-service DoS attack against the server. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS7.8AI score0.01852EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.64 views

CVE-2016-6627

An issue was discovered in phpMyAdmin. An attacker can determine the phpMyAdmin host location through the file url.php. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

5.3CVSS7.2AI score0.01339EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.42 views

CVE-2016-6630

An issue was discovered in phpMyAdmin. An authenticated user can trigger a denial-of-service DoS attack by entering a very long password at the change password dialog. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS7.9AI score0.02069EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.54 views

CVE-2016-9849

An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction $cfg'Servers'$i'AllowRoot' and deny rules for username by using Null Byte in the username. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

9.8CVSS9.4AI score0.01964EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.64 views

CVE-2016-9851

An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to bypass the logout timeout. All 4.6.x versions prior to 4.6.5, and 4.4.x versions prior to 4.4.15.9 are affected...

5.3CVSS5.5AI score0.01341EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.51 views

CVE-2016-9858

An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of service attack in saved searches feature. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

5.3CVSS6.9AI score0.02256EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.74 views

CVE-2016-9864

An issue was discovered in phpMyAdmin. With a crafted username or a table name, it was possible to inject SQL statements in the tracking functionality that would run with the privileges of the control user. This gives read and write access to the tables of the configuration storage database, and ...

7.5CVSS8.4AI score0.01684EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.61 views

CVE-2016-9865

An issue was discovered in phpMyAdmin. Due to a bug in serialized string parsing, it was possible to bypass the protection offered by PMAsafeUnserialize function. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

9.8CVSS9.4AI score0.02267EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.85 views

CVE-2016-9854

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...

5.3CVSS5.6AI score0.02157EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.73 views

CVE-2016-9857

An issue was discovered in phpMyAdmin. XSS is possible because of a weakness in a regular expression used in some JavaScript processing. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

6.1CVSS6.6AI score0.01467EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.52 views

CVE-2016-9866

An issue was discovered in phpMyAdmin. When the argseparator is different from its default & value, the CSRF token was not properly stripped from the return URL of the preference import action. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to...

9.8CVSS9.4AI score0.01018EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2016/12/11 2:0 a.m.32 views

CVE-2016-6629

An issue was discovered in phpMyAdmin involving the $cfg'ArbitraryServerRegexp' configuration directive. An attacker could reuse certain cookie values in a way of bypassing the servers defined by ArbitraryServerRegexp. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x...

10CVSS9.3AI score0.03202EPSS
SaveExploits0
CVE
CVE
added 2016/12/11 2:0 a.m.85 views

CVE-2016-9851

CVE-2016-9851 (phpMyAdmin) : A vulnerability allows bypass of the logout timeout via a crafted request parameter. Affected are all 4.6.x versions prior to 4.6.5 and 4.4.x versions prior to 4.4.15.9. The issue is documented in the initial CVE entry, with CVSS metrics indicating a low to medium imp...

5.3CVSS5.2AI score0.01341EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2016/12/11 2:0 a.m.119 views

CVE-2016-6624

CVE-2016-6624 affects phpMyAdmin: IPv6 in proxy setups can bypass IP-based authentication when the proxy is allowed but the client is not. Affected versions are 4.6.x before 4.6.4, 4.4.x before 4.4.15.8, and 4.0.x before 4.0.10.17. The vulnerability allows the attacking host to connect despite IP...

5.9CVSS7.2AI score0.02025EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2016/12/11 2:0 a.m.91 views

CVE-2016-6608

CVE-2016-6608 refers to a Cross-site Scripting (XSS) vulnerability in phpMyAdmin affecting 4.6.x versions prior to 4.6.4, specifically impacting the database privilege check and the Remove partitioning functionality via specially crafted database names. The issue is rooted in input validation tha...

6.1CVSS6.1AI score0.0128EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2016/12/11 2:0 a.m.27 views

CVE-2016-6620

An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize function without verification that it's valid serialized data. The unserialization can result in code execution because of the interaction with object instantiation and autoloading. All 4.6.x versions prior to 4.6.4...

9.5AI score0.03189EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2016/12/11 2:0 a.m.28 views

CVE-2016-6612

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

7.7AI score0.01701EPSS
SaveExploits0References4
CVE
CVE
added 2016/12/11 2:0 a.m.116 views

CVE-2016-6629

CVE-2016-6629 affects phpMyAdmin through the configuration directive $cfg['ArbitraryServerRegexp'], enabling an attacker to reuse certain cookie values to bypass server restrictions defined by ArbitraryServerRegexp. Affected are 4.6.x versions before 4.6.4, 4.4.x before 4.4.15.8, and 4.0.x before...

10CVSS9AI score0.03202EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2016/12/11 2:0 a.m.34 views

CVE-2016-4412

An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the user's valid phpMyAdmin token. All 4.0.x versions prior to 4.0.10.16 are affected...

4.8AI score0.01024EPSS
SaveExploits0References3
Rows per page
Query Builder