Export limit exceeded: 425825 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-21507

mysql2: Improper Input Validation

Versions of the package mysql2 before 3.9.3 are vulnerable to Improper Input Validation through the keyFromFields function, resulting in cache poisoning. An attacker can inject a colon (:) character within a value of the attacker-crafted key.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mysqljs Sidorares
Products
Mysql2 Mysql2
CVE-2024-21509

mysql2: Prototype Poisoning

Versions of the package mysql2 before 3.9.4 are vulnerable to Prototype Poisoning due to insecure results object creation and improper user input sanitization passed through parserFn in text_parser.js and binary_parser.js.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sidorares
Products
Mysql2