Lucene search
K

1300 matches found

Debian CVE
Debian CVE
added 2022/02/18 7:51 p.m.35 views

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.8AI score0.00064EPSS
Exploits0
MariaDBUnix
MariaDBUnix
added 2022/02/18 7:51 p.m.42 views

CVE-2022-24048

Disclaimer: This data contains information about vulnerable...

7.8CVSS7.5AI score0.00064EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2022/02/18 7:51 p.m.51 views

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.9AI score0.00064EPSS
Exploits0
Cvelist
Cvelist
added 2022/02/18 7:51 p.m.20 views

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7CVSS8.3AI score0.00064EPSS
Exploits0References6
Prion
Prion
added 2022/02/16 5:15 p.m.21 views

Sql injection

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusionreason parameter found in the /includes/class-wp-statistics-exclusion.php file which allows attackers without authentication to inject arbitrary SQL queries to obtai...

4.3CVSS7.8AI score0.27702EPSS
Exploits3References2Affected Software1
WPVulnDB
WPVulnDB
added 2022/02/16 12:0 a.m.29 views

WP Statistics < 13.1.6 - Unauthenticated Blind SQL Injection via current_page_id

The plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the currentpageid parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information...

9.8CVSS5.2AI score0.5776EPSS
Exploits4References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/02/16 12:0 a.m.32 views

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...

7CVSS4.5AI score0.00064EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/16 12:0 a.m.27 views

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied...

7CVSS3.1AI score0.00057EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/16 12:0 a.m.26 views

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...

7CVSS4.5AI score0.00064EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/16 12:0 a.m.33 views

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...

7CVSS4.5AI score0.00064EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/16 12:0 a.m.19 views

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object...

7CVSS3.1AI score0.0007EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2022/02/15 5:47 p.m.52 views

CVE-2021-45346

A memory leak flaw was found in the SQLite Project via maliciously crafted SQL Queries made via editing the Database File. This flaw allows a malicious user to obtain sensitive information due to a possible query to a record and leaking subsequent bytes of memory that extend beyond the record...

4.3CVSS2.7AI score0.00271EPSS
Exploits1References4
NVD
NVD
added 2022/02/14 7:15 p.m.23 views

CVE-2021-45346

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries made via editing the Database File, it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain...

4.3CVSS0.00271EPSS
Exploits1References5
OSV
OSV
added 2022/02/14 7:15 p.m.7 views

CVE-2021-45346

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries made via editing the Database File, it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain...

4.3CVSS6.8AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2022/02/14 7:15 p.m.44 views

CVE-2021-45346

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries made via editing the Database File, it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain...

4.3CVSS6.8AI score0.00271EPSS
Exploits1References3
Cvelist
Cvelist
added 2022/02/14 12:0 a.m.23 views

CVE-2021-45346

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries made via editing the Database File, it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain...

5.3AI score0.00271EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2022/02/14 12:0 a.m.31 views

CVE-2021-45346

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries made via editing the Database File, it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain...

4.3CVSS6.4AI score0.00271EPSS
Exploits1
Zero Day Initiative
Zero Day Initiative
added 2022/02/11 12:0 a.m.28 views

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied...

7CVSS3.1AI score0.00057EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/02/10 12:0 a.m.46 views

FreeBSD : MariaDB -- Multiple vulnerabilities (ff5606f7-8a45-11ec-8be6-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ff5606f7-8a45-11ec-8be6-d4c9ef517024 advisory. - MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT...

7.8CVSS7.6AI score0.0007EPSS
Exploits2References11
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:0 a.m.286 views

MariaDB 10.7.0 < 10.7.2 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.7.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.7.2 advisory. - MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local...

7.8CVSS7.3AI score0.07539EPSS
Exploits3References8
Rows per page
Query Builder