2016

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is p

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is p

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is p

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is p

An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to bypass the logout timeou

An issue was discovered in phpMyAdmin. Username matching for the allow/deny rules may result in wrong matches and detect

An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg['Servers'][$i]['AllowRoot'])

An issue was discovered in phpMyAdmin. phpinfo (phpinfo.php) shows PHP information including values of HttpOnly cookies.

An issue was discovered in phpMyAdmin. When the user does not specify a blowfish_secret key for encrypting cookies, phpM

An issue was discovered in phpMyAdmin. phpMyAdmin can be used to trigger a remote code execution attack against certain

An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during

An issue was discovered in phpMyAdmin. A user can execute a remote code execution attack against a server when phpMyAdmi

An issue was discovered in phpMyAdmin. An authenticated user can trigger a denial-of-service (DoS) attack by entering a

An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive. An attacker c

An issue was discovered in phpMyAdmin. An attacker may be able to trigger a user to download a specially crafted malicio

An issue was discovered in phpMyAdmin. An attacker can determine the phpMyAdmin host location through the file url.php.

An issue was discovered in phpMyAdmin. An attacker could redirect a user to a malicious web page. All 4.6.x versions (pr

An issue was discovered in phpMyAdmin. An attacker can determine whether a user is logged in to phpMyAdmin. The user's s

An issue was discovered in phpMyAdmin involving improper enforcement of the IP-based authentication rules. When phpMyAdm

An issue was discovered in phpMyAdmin. An authorized user can cause a denial-of-service (DoS) attack on a server by pass

An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service (DoS) attack by fo

An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize() function without verification that i

An issue was discovered in phpMyAdmin. In the user interface preference feature, a user can execute an SQL injection att

An issue was discovered in phpMyAdmin. The transformation feature allows a user to trigger a denial-of-service (DoS) att

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL inje

An issue was discovered in phpMyAdmin. In the "User group" and "Designer" features, a user can execute an SQL injection

XSS issues were discovered in phpMyAdmin. This affects navigation pane and database/table hiding feature (a specially-cr

An issue was discovered in phpMyAdmin involving the %u username replacement functionality of the SaveDir and UploadDir f

An issue was discovered in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permi

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the ser

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL inje

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the exp

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands thr

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functi

XSS issues were discovered in phpMyAdmin. This affects Zoom search (specially crafted column content can be used to trig

An issue was discovered in cookie encryption in phpMyAdmin. The decryption of the username/password is vulnerable to a p

An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after au

PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP inject

Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS adm

Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows

Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, al

The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators

The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS admini

The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrator

The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Em

The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administra

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out

Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to a

Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest

The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrato