SQL - CVE CyberSecurity Database News (Page 227)

Feb 18, 2022 Exploit SQL

CVE-2022-24051 - How a MariaDB CONNECT Storage Engine Format String Bug Allows Privilege Escalation

When most developers use MariaDB, they trust that SQL queries and engine plugins are secure by default. However, CVE-2022-24051 shattered this assumption for many users

Feb 18, 2022 Exploit SQL

CVE-2022-24048 - MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Exploit Deep Dive

Note: This article is a technical exploration of CVE-2022-24048. It explains the details, how the exploit works, includes example code, and original references. The focus

Feb 16, 2022 WordPress SQL

CVE-2022-0513 The WP Statistics plugin is vulnerable toSQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter. This allows attackers to gain access to the plugin's files.

SQL injection occurs when a website's software does not defend against malicious SQL queries. An attacker can inject malicious SQL queries by placing

Feb 9, 2022 SQL

CVE-2022-22532 An attacker in SAP NetWeaver Application Server Java could create a HTTP request that triggers a memory leak. The versions listed above are vulnerable.

This issue has been addressed in version 7.53. In version 7.22, an unauthenticated attacker could send a crafted request to get the values

Feb 9, 2022 RCE Microsoft API Exploit SQL

CVE-2022-21957 - Breaking Down the Microsoft Dynamics 365 (On-Premises) Remote Code Execution Vulnerability

--- Microsoft Dynamics 365 is a popular business software suite, often running critical operations for companies around the world. But like any big application, it’