11 matches found
CVE-2019-20858
An issue was discovered in Mattermost Server before 5.15.0. It allows attackers to cause a denial of service CPU consumption via crafted characters in a SQL LIKE clause to an APIv4 endpoint...
EUVD-2009-3903
Malware in sbrugna...
CVE-2009-3932
The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service memory corruption and plugin crash or possibly execute arbitrary code via unspecified use of the Gears SQL API, related to putting "SQL metadata into a bad state."...
Cross-site Request Forgery (CSRF)
Overview vanna is a Generate SQL queries from natural language Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF in the runsql function, accessible via the /api/v0/runsql endpoint. An attacker can alter or delete but not read data by sending requests that include...
Malicious code in tauri-plugin-sql-api (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3081 Malicious code in tauri-plugin-sql-api (npm)
--- -= Per source details. Do not edit below this line.=-...
Google Chrome Multiple Vulnerabilities - Nov09
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnnov09.nasl 5055 2017-01-20 14:08:39Z teissa $ Google Chrome Multiple Vulnerabilities - Nov09 Authors: Sharath S Copyright: Copyright c 2009 SecPod,...
Memory corruption
The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service memory corruption and plugin crash or possibly execute arbitrary code via unspecified use of the Gears SQL API, related to putting "SQL metadata into a bad state."...
CVE-2009-3932
Removed by vendor...
Google Chrome < 3.0.195.32 RCE
Binary data 5225.pasl...
Google Chrome < 3.0.195.32 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 3.0.195.32. Such versions are reportedly affected by multiple issues : - The user is not warned about certain dangerous file types such as 'SVG', 'MHT', and 'XML'. In some browsers, JavaScript can execute within these types...