PT-2020-2619

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.19 and prior Description The issue is related to insufficient access control in the MySQL Server product, specifically in the Server: Information Schema component. It allows a highly privileged attacker with network...

CVE-2020-2694

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.18 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

Debian: Security Advisory (DLA-2088-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MySQL Server Information Disclosure

Vulnerability of the MySQL Server component: The information schema of the MySQL Server database management system is vulnerable due to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using the HTTP protoc...

Information Disclosure

schema-inspector is vulnerable to information disclosure. The vulnerability exists as the sanitize and validate functions can be bypassed, causing object's prototype properties to be enumerable...

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2018-1341)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-10781

In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the sanitize and the validate function used within schema-inspector...

app.io (>=0.0.1, <=0.0.4), feathers-validation (>=0.5.0, <=0.5.1) +6 more potentially affected by CVE-2019-10781 via schema-inspector (>=1.4.2, <=1.6.8)

schema-inspector NPM version =1.4.2, =0.0.1, =0.5.0, =3.8.1, =1.0.2, =1.0.0, =0.2.0, =0.5.0 Source cves: CVE-2019-10781 Source advisory: MEND:CVE-2019-10781...

CVE-2019-10781

In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the sanitize and the validate function used within schema-inspector...

CVE-2019-10781

Schema-inspector (JS package) is affected by CVE-2019-10781 through versions before 1.6.9. A specially crafted JavaScript object can bypass sanitize() and validate(), enabling information exposure and potential property tampering. The root cause is the bypass of input sanitisation/validation with...

CVE-2019-10781

In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the sanitize and the validate function used within schema-inspector...

Libsolv Heap Buffer Overflow Vulnerability

Libsolv is a free package management library. A heap buffer overflow vulnerability exists in repodataschema2id in repodata.c in versions of libsolv prior to 0.7.6. No detailed vulnerability details are provided at this time...

PT-2020-9133

Name of the Vulnerable Software and Affected Versions schema-inspector versions prior to 1.6.9 Description A maliciously crafted JavaScript object can bypass the sanitize and the validate functions used within schema-inspector. Recommendations For versions prior to 1.6.9, update to version 1.6.9 ...

CVE-2019-10781: Exposure of Resource to Wrong Sphere

In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the sanitize and the validate function used within schema-inspector...

ALPINE-CVE-2019-20388

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...

DEBIAN-CVE-2019-20388

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...

UBUNTU-CVE-2019-20388

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...

CVE-2019-20387

repodataschema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema...

CVE-2019-20388

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...

Oracle MySQL Server Unauthorized Access Vulnerability (CNVD-2020-04838)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. A security vulnerability exists in the Server: Information Schema component in Oracle MySQL Server 8.0.18 and earlier. An attacker could exploit this vulnerability to gain unauthorize...