https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:17:23 +0000 https://vulnerability.circl.lu/vuln/cve-2019-12922 <p>A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.</p> <p>A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.</p> https://vulnerability.circl.lu/vuln/cve-2019-12922 https://vulnerability.circl.lu/vuln/usn-4843-1 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: phpmyadmin, Ubuntu:Pro:16.04:LTS: phpmyadmin, Ubuntu:Pro:18.04:LTS: phpmyadmin, Ubuntu:Pro:20.04:LTS: phpmyadmin</p> <p>Javier Nieto and Andres Rojas discovered that phpMyAdmin incorrectly managed input in the form of passwords. An attacker could use this vulnerability to cause a denial-of-service (DoS). This issue only affected Ubuntu 14.04 ESM. (CVE-2014-9218)</p> <p>Emanuel Bronshtein discovered that phpMyAdmin failed to properly sanitize input in the form of database names in the PHP Array export feature. An authenticated attacker could use this vulnerability to run arbitrary PHP commands. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2016-6609)</p> <p>Emanuel Bronshtein discovered that phpMyAdmin failed to properly sanitize input. An attacker could use this vulnerability to execute SQL injection attacks. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2016-6619)</p> <p>Emanuel Bronshtein discovered that phpMyadmin failed to properly sanitize input. An authenticated attacker could use this vulnerability to cause a denial-of-service (DoS). This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2016-6630)</p> <p>Emanuel Bronshtein discovered that phpMyAdmin failed to properly sanitize input. An attacker could use this vulnerability to bypass AllowRoot restrictions and deny rules for usernames. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2016-9849)</p> <p>Emanuel Bronshtein discovered that phpMyAdmin would allow sensitive information to be leaked when the argument separator in a URL was not the default &amp; value. An attacker could use this v…</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: phpmyadmin, Ubuntu:Pro:16.04:LTS: phpmyadmin, Ubuntu:Pro:18.04:LTS: phpmyadmin, Ubuntu:Pro:20.04:LTS: phpmyadmin</p> <p>Javier Nieto and Andres Rojas discovered that phpMyAdmin incorrectly managed input in the form of passwords. An attacker could use this vulnerability to cause a denial-of-service (DoS). This issue only affected Ubuntu 14.04 ESM. (CVE-2014-9218)</p> <p>Emanuel Bronshtein discovered that phpMyAdmin failed to properly sanitize input in the form of database names in the PHP Array export feature. An authenticated attacker could use this vulnerability to run arbitrary PHP commands. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2016-6609)</p> <p>Emanuel Bronshtein discovered that phpMyAdmin failed to properly sanitize input. An attacker could use this vulnerability to execute SQL injection attacks. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2016-6619)</p> <p>Emanuel Bronshtein discovered that phpMyadmin failed to properly sanitize input. An authenticated attacker could use this vulnerability to cause a denial-of-service (DoS). This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2016-6630)</p> <p>Emanuel Bronshtein discovered that phpMyAdmin failed to properly sanitize input. An attacker could use this vulnerability to bypass AllowRoot restrictions and deny rules for usernames. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2016-9849)</p> <p>Emanuel Bronshtein discovered that phpMyAdmin would allow sensitive information to be leaked when the argument separator in a URL was not the default &amp; value. An attacker could use this v…</p> https://vulnerability.circl.lu/vuln/usn-4843-1