Lucene search
K

13 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.1 views

Astra Linux - уязвимость в mariadb-10.3

MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binarystring::freebuffer at /sql/sqlstring.h...

7.5CVSS7.4AI score0.00238EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2010-4625

Malware in sbrugna...

9.8CVSS9.2AI score0.00418EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2023/11/08 3:38 p.m.2 views

mariadb: use-after-poison in Binary_string::free_buffer

A flaw was found in the MariaDB Server. It contains a use-after-free via the component,Binarystring::freebuffer at /sql/sqlstring.h, affecting availability...

7.5CVSS7.3AI score0.00238EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:26 a.m.1 views

SUSE CVE-2022-27447

MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binarystring::freebuffer at /sql/sqlstring.h...

7.1CVSS8.4AI score0.00238EPSS
Exploits1References10
RedHat Linux
RedHat Linux
added 2022/09/13 9:57 a.m.2 views

mariadb: use-after-poison in Binary_string::free_buffer

A flaw was found in the MariaDB Server. It contains a use-after-free via the component,Binarystring::freebuffer at /sql/sqlstring.h, affecting availability...

7.5CVSS7.3AI score0.00238EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/04/14 12:56 p.m.22 views

CVE-2022-27447

MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binarystring::freebuffer at /sql/sqlstring.h...

7.9AI score0.00238EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/04/14 12:0 a.m.1 views

MariaDB 资源管理错误漏洞

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A memory misreference vulnerability exists in Mariadb v10.9 and earlier versions, which originates in the /sql/sqlstring.h component...

7.5CVSS7.7AI score0.00238EPSS
Exploits1References15
Cvelist
Cvelist
added 2019/11/20 3:41 p.m.9 views

CVE-2010-4660

Unspecified vulnerability in statusnet through 2010 due to the way addslashes are used in SQL string escapes...

9.7AI score0.00418EPSS
Exploits0References2
CVE
CVE
added 2019/11/20 3:41 p.m.42 views

CVE-2010-4660

CVE-2010-4660 relates to the open‑source micro‑blogging app StatusNet . It describes an SQL injection vulnerability caused by the way addslashes is used in SQL string escapes, affecting StatusNet up through 2010 and prior versions. The connected records confirm a PHP-based issue with database inp...

9.8CVSS9.5AI score0.00418EPSS
Exploits0References2Affected Software1
seebug.org
seebug.org
added 2008/05/15 12:0 a.m.29 views

CaLogic Calendars 1.2.2 (langsel) Remote SQL Injection Vulnerability

No description provided by source. /---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars V1.2.2" POC :...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2008/05/13 12:0 a.m.95 views

CaLogic Calendars 1.2.2 - langsel SQL Injection

CaLogic Calendars 1.2.2 - langsel SQL Injection /---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars...

0.6AI score
Exploits0
Packet Storm
Packet Storm
added 2008/05/13 12:0 a.m.34 views

calogic-sql.txt

/---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars V1.2.2" POC :...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 1999/05/25 12:0 a.m.52 views

Microsoft IIS 4.0 / Microsoft JET 3.5/3.5.1 Database Engine - VBA

source: https://www.securityfocus.com/bid/286/info Microsoft's JET database engine feature allows the embedding of Visual Basic for Application in SQL string expressions and the lack of metacharacter filtering by many web applications may allow remote users to execute commands on the system...

7.4AI score
Exploits0
Rows per page
Query Builder