Use-After-Free

mariadb is vulnerable to use-after-free. The vulnerability exists in the component Itemfuncin::cleanup which allows an attacker to exploit this via specially crafted SQL statements causing a crash of the system...

Use After Free

MariaDB is vulnerable to Use After Free. The vulnerability exists due to a memory corruption via the component Itemargs::walkarg, allowing an attacker to exploit the vulnerability via specially crafted SQL statements...

Use-After-Free

mariadb is vulnerable to use-after-free. The vulnerability exists in the component mystrcasecmp8bit which allows an attacker to cause a crash via specially crafted SQL statements...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in the component 1Field::setdefault1 which allows an attacker to cause an application crash via specially crafted SQL statements...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. An issue in the component mydecimal::operator allows remote attackers to cause a denial of service via specially crafted SQL statements...

Buffer Overflow

mariadb is vulnerable to buffer overflow. The vulnerability exists due to decimalbinsize which allows an attacker to cause a crash via specially crafted SQL statements...

ChatBot Application with a Suggestion Feature SQL Injection Vulnerability

ChatBot Application with a Suggestion FeatureA ChatBot application with a suggestion feature. chatBot Application with a Suggestion Feature v1.0 is vulnerable to a SQL injection vulnerability in /simple chatbot/classes/Master.php?f=deleteresponse, id is missing validation for external input SQL...

EulerOS 2.0 SP3 : mariadb (EulerOS-SA-2022-1746)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression CTE...

Use-After-Free

mariadb is vulnerable to Use-After-Free. The vulnerability exists in Binarystring::freebuffer of sqlstring.h which allows an attacker to cause a crash via specially crafted SQL statements...

GHSA-7FF4-CV53-4CJQ phpMyAdmin SQL injection vulnerability

An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query...

CVE-2022-22495

IBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 226941...

FreeBSD : MariaDB -- Multiple vulnerabilities (04fecc47-dad2-11ec-8fbd-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 04fecc47-dad2-11ec-8fbd-d4c9ef517024 advisory. The MariaDB project reports: MariaDB fixed 23 vulnerabilities across all supported versions...

Slackware Linux 15.0 / current mariadb Multiple Vulnerabilities (SSA:2022-141-01)

The version of mariadb installed on the remote host is prior to 10.5.16 / 10.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-141-01 advisory. New mariadb packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted...

CVE-2022-1183

On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS DoT and DNS over HTTPS DoH, bu...

CVE-2022-1183

On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS DoT and DNS over HTTPS DoH, bu...

CVE-2022-1183

On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS DoT and DNS over HTTPS DoH, bu...

Cobbler is vulnerable to code injection

templateapi.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58668）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=clients/manageclient&id= lacks validation of external input SQL statements, which could be exploited to execute illegal SQL commands to steal sensitive database data...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58677）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. version 1.0 of Online Sports Complex Booking System is vulnerable to SQL injection, which originates in scbs/classes/ Master.php?f=delete, the id parameter of the post request lacks...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58670）

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=user/manageuser&id= lacks validation of external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data...