Lucene search
+L

1420 matches found

CVE
CVE
•added 2022/02/18 7:51 p.m.•430 views

CVE-2022-24051

CVE-2022-24051 corresponds to a MariaDB CONNECT Storage Engine vulnerability described as a Format String Privilege Escalation. The issue stems from inadequate validation of a user-supplied string when it is used as a format specifier during SQL processing, which can allow a local attacker to esc...

7.8CVSS7.7AI score0.00657EPSS
SaveExploits0References6Affected Software1
MariaDBUnix
MariaDBUnix
•added 2022/02/18 7:51 p.m.•72 views

CVE-2022-24051

Disclaimer: This data contains information about vulnerable...

7.8CVSS7.4AI score0.00657EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/18 7:51 p.m.•41 views

CVE-2022-24051

Removed by vendor...

7.8CVSS7.2AI score0.00657EPSS
SaveExploits0
OSV
OSV
•added 2022/02/18 7:51 p.m.•47 views

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7CVSS7.8AI score
SaveExploits0References8
Debian CVE
Debian CVE
•added 2022/02/18 7:51 p.m.•61 views

CVE-2022-24050

Removed by vendor...

7.8CVSS7.2AI score0.00638EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/02/18 7:51 p.m.•106 views

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7CVSS8.3AI score0.00638EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2022/02/18 7:51 p.m.•46 views

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS8AI score0.00638EPSS
SaveExploits0
MariaDBUnix
MariaDBUnix
•added 2022/02/18 7:51 p.m.•79 views

CVE-2022-24050

Disclaimer: This data contains information about vulnerable...

7.8CVSS7.5AI score0.00638EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/02/18 7:51 p.m.•79 views

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7CVSS8.3AI score0.00689EPSS
SaveExploits0References6
MariaDBUnix
MariaDBUnix
•added 2022/02/18 7:51 p.m.•62 views

CVE-2022-24048

Disclaimer: This data contains information about vulnerable...

7.8CVSS7.5AI score0.00689EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/02/18 7:51 p.m.•48 views

CVE-2022-24048

Removed by vendor...

7.8CVSS7.2AI score0.00689EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2022/02/18 7:51 p.m.•63 views

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.9AI score0.00689EPSS
SaveExploits0
OSV
OSV
•added 2022/02/18 7:51 p.m.•41 views

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7CVSS7.8AI score
SaveExploits0References8
CVE
CVE
•added 2022/02/18 7:51 p.m.•383 views

CVE-2022-24048

CVE-2022-24048 corresponds to a MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation. The issue arises from insufficient validation of user-supplied data length before copying it into a fixed-length stack buffer, enabling a local attacker with authentication to escalate...

7.8CVSS7.7AI score0.00689EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•5 views

CVE-2022-24048: Stack-based Buffer Overflow

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.5AI score0.00689EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•4 views

CVE-2022-24051: Use of Externally-Controlled Format String

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS7.4AI score0.00657EPSS
SaveExploits0References2
Prion
Prion
•added 2022/02/16 5:15 p.m.•36 views

Sql injection

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusionreason parameter found in the /includes/class-wp-statistics-exclusion.php file which allows attackers without authentication to inject arbitrary SQL queries to obtai...

4.3CVSS7.8AI score0.5346EPSS
SaveExploits3References2Affected Software1
WPVulnDB
WPVulnDB
•added 2022/02/16 12:00 a.m.•33 views

WP Statistics < 13.1.6 - Unauthenticated Blind SQL Injection via current_page_id

The plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the currentpageid parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information...

9.8CVSS5.2AI score0.8093EPSS
SaveExploits4References1Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/16 12:00 a.m.•34 views

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...

7CVSS4.5AI score0.00689EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/02/16 12:00 a.m.•42 views

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...

7CVSS4.5AI score0.00689EPSS
SaveExploits0References1
Rows per page
Query Builder