Lucene search
K

23 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-7156

Malware in sbrugna...

9.8CVSS9.4AI score0.00546EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-42673

Malicious code in bioql PyPI...

8.8CVSS8.1AI score0.00723EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-3276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are...

8.8CVSS7.1AI score0.00723EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2022/10/27 9:5 a.m.4 views

Puppetlabs-mysql: Command Injection in the puppetlabs-mysql module

A flaw was in the puppetlabs-mysql module, where a Command injection can occur. This flaw allows a malicious actor to provide unsanitized input to the module...

8.8CVSS5.8AI score0.00723EPSS
Exploits0References5
CNVD
CNVD
added 2022/10/11 12:0 a.m.15 views

Puppet command injection vulnerability

Puppet is a set of client/server C/S architecture-based configuration management tools from Puppet Labs in the United States, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. A command injection vulnerability exists in puppet puppetlabs-mysql...

8.8CVSS3.9AI score0.00723EPSS
Exploits0References1
OSV
OSV
added 2022/10/07 9:15 p.m.16 views

CVE-2022-3276

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise...

8.8CVSS8.8AI score0.00723EPSS
Exploits0References1
OSV
OSV
added 2022/10/07 9:15 p.m.2 views

DEBIAN-CVE-2022-3276

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise...

8.8CVSS7.7AI score0.00723EPSS
Exploits0References1
Prion
Prion
added 2022/10/07 9:15 p.m.6 views

Command injection

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise...

6.5CVSS8.7AI score0.00723EPSS
Exploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2022/10/07 9:15 p.m.22 views

CVE-2022-3276

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise...

8.8CVSS7.1AI score0.00723EPSS
Exploits0References4
OSV
OSV
added 2022/10/07 9:15 p.m.1 views

UBUNTU-CVE-2022-3276

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise...

8.8CVSS7.1AI score0.00723EPSS
Exploits0References5
Cvelist
Cvelist
added 2022/10/07 12:0 a.m.14 views

CVE-2022-3276 Puppetlabs-mysql Command Injection

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise...

8.4CVSS9.1AI score0.00723EPSS
Exploits0References1
CVE
CVE
added 2022/10/07 12:0 a.m.80 views

CVE-2022-3276

CVE-2022-3276 concerns the puppetlabs-mysql module. The vulnerability allows command injection in versions prior to 13.0.0 when unsanitized input is provided to the module. The NVD/CVSS data indicate a high-severity issue (base score up to 8.8) with network access as a potential attack vector and...

8.8CVSS8.7AI score0.00723EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2022/10/06 5:26 a.m.34 views

CVE-2022-3276

A flaw was in the puppetlabs-mysql module, where a Command injection can occur. This flaw allows a malicious actor to provide unsanitized input to the module...

8.4CVSS3.6AI score0.00723EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/10/03 12:0 a.m.17 views

Puppet 安全漏洞

Puppet is a set of client/server C/S architecture-based configuration management tools from Puppet Labs in the United States, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. A command injection vulnerability exists in puppet puppetlabs-mysql...

8.8CVSS7.7AI score0.00723EPSS
Exploits0References6
CNVD
CNVD
added 2017/12/25 12:0 a.m.2 views

Unspecified vulnerability in puppetlabs-mysql

Puppet is a set of configuration management tools based on a client/server C/S architecture from Puppet Labs in the United States, which can be used to manage profiles, users, cron tasks, packages, system services, etc. puppetlabs-mysql is a module that manages MySQL installations and...

9.8CVSS6.8AI score0.00546EPSS
Exploits0References1
Prion
Prion
added 2017/12/21 3:29 p.m.17 views

Authentication flaw

puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysqluser' user parameter contains a host with a netmask...

7.5CVSS7.6AI score0.00546EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2017/12/21 3:29 p.m.2 views

DEBIAN-CVE-2015-7224

puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysqluser' user parameter contains a host with a netmask...

9.8CVSS9.8AI score0.00546EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/12/21 3:29 p.m.17 views

CVE-2015-7224

puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysqluser' user parameter contains a host with a netmask...

9.8CVSS7.3AI score0.00546EPSS
Exploits0References2
OSV
OSV
added 2017/12/21 3:29 p.m.8 views

CVE-2015-7224

puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysqluser' user parameter contains a host with a netmask...

9.8CVSS7.3AI score0.00546EPSS
Exploits0References1
NVD
NVD
added 2017/12/21 3:29 p.m.12 views

CVE-2015-7224

puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysqluser' user parameter contains a host with a netmask...

9.8CVSS9.8AI score0.00546EPSS
Exploits0References1
Rows per page
Query Builder