Lucene search
+L

6030 matches found

AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.41 views

CVE-2016-6620

An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize function without verification that it's valid serialized data. The unserialization can result in code execution because of the interaction with object instantiation and autoloading. All 4.6.x versions prior to 4.6.4...

9.8CVSS9.6AI score0.03189EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.64 views

CVE-2016-6627

An issue was discovered in phpMyAdmin. An attacker can determine the phpMyAdmin host location through the file url.php. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

5.3CVSS7.2AI score0.01339EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.42 views

CVE-2016-6630

An issue was discovered in phpMyAdmin. An authenticated user can trigger a denial-of-service DoS attack by entering a very long password at the change password dialog. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS7.9AI score0.02069EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.57 views

CVE-2016-6618

An issue was discovered in phpMyAdmin. The transformation feature allows a user to trigger a denial-of-service DoS attack against the server. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS7.8AI score0.01852EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.50 views

CVE-2016-6623

An issue was discovered in phpMyAdmin. An authorized user can cause a denial-of-service DoS attack on a server by passing large values to a loop. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS7.8AI score0.01693EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.54 views

CVE-2016-9849

An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction $cfg'Servers'$i'AllowRoot' and deny rules for username by using Null Byte in the username. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

9.8CVSS9.4AI score0.01964EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.64 views

CVE-2016-9851

An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to bypass the logout timeout. All 4.6.x versions prior to 4.6.5, and 4.4.x versions prior to 4.4.15.9 are affected...

5.3CVSS5.5AI score0.01341EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.85 views

CVE-2016-9854

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the expo...

5.3CVSS5.6AI score0.02157EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.73 views

CVE-2016-9857

An issue was discovered in phpMyAdmin. XSS is possible because of a weakness in a regular expression used in some JavaScript processing. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

6.1CVSS6.6AI score0.01467EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.51 views

CVE-2016-9858

An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of service attack in saved searches feature. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

5.3CVSS6.9AI score0.02256EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.74 views

CVE-2016-9864

An issue was discovered in phpMyAdmin. With a crafted username or a table name, it was possible to inject SQL statements in the tracking functionality that would run with the privileges of the control user. This gives read and write access to the tables of the configuration storage database, and ...

7.5CVSS8.4AI score0.01684EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.61 views

CVE-2016-9865

An issue was discovered in phpMyAdmin. Due to a bug in serialized string parsing, it was possible to bypass the protection offered by PMAsafeUnserialize function. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

9.8CVSS9.4AI score0.02267EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2016/12/11 2:0 a.m.52 views

CVE-2016-9866

An issue was discovered in phpMyAdmin. When the argseparator is different from its default & value, the CSRF token was not properly stripped from the return URL of the preference import action. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to...

9.8CVSS9.4AI score0.01018EPSS
SaveExploits0
CVE
CVE
added 2016/12/11 2:0 a.m.85 views

CVE-2016-9851

CVE-2016-9851 (phpMyAdmin) : A vulnerability allows bypass of the logout timeout via a crafted request parameter. Affected are all 4.6.x versions prior to 4.6.5 and 4.4.x versions prior to 4.4.15.9. The issue is documented in the initial CVE entry, with CVSS metrics indicating a low to medium imp...

5.3CVSS5.2AI score0.01341EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2016/12/11 2:0 a.m.119 views

CVE-2016-6624

CVE-2016-6624 affects phpMyAdmin: IPv6 in proxy setups can bypass IP-based authentication when the proxy is allowed but the client is not. Affected versions are 4.6.x before 4.6.4, 4.4.x before 4.4.15.8, and 4.0.x before 4.0.10.17. The vulnerability allows the attacking host to connect despite IP...

5.9CVSS7.2AI score0.02025EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2016/12/11 2:0 a.m.91 views

CVE-2016-6608

CVE-2016-6608 refers to a Cross-site Scripting (XSS) vulnerability in phpMyAdmin affecting 4.6.x versions prior to 4.6.4, specifically impacting the database privilege check and the Remove partitioning functionality via specially crafted database names. The issue is rooted in input validation tha...

6.1CVSS6.1AI score0.0128EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2016/12/11 2:0 a.m.27 views

CVE-2016-6620

An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize function without verification that it's valid serialized data. The unserialization can result in code execution because of the interaction with object instantiation and autoloading. All 4.6.x versions prior to 4.6.4...

9.5AI score0.03189EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2016/12/11 2:0 a.m.28 views

CVE-2016-6612

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

7.7AI score0.01701EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2016/12/11 2:0 a.m.34 views

CVE-2016-4412

An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the user's valid phpMyAdmin token. All 4.0.x versions prior to 4.0.10.16 are affected...

4.8AI score0.01024EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2016/12/11 2:0 a.m.39 views

CVE-2016-9847

An issue was discovered in phpMyAdmin. When the user does not specify a blowfishsecret key for encrypting cookies, phpMyAdmin generates one at runtime. A vulnerability was reported where the way this value is created uses a weak algorithm. This could allow an attacker to determine the user's...

6AI score0.02002EPSS
SaveExploits0References3
Rows per page
Query Builder