Database Security

abraxas/spark-jdbc-serde-url

Apache Spark 4.2.0 - High - Remote - JDBC URL injection - ALTER TABLE SET SERDEPROPERTIES

abraxas/mysql-install-component-scheme

MySQL Community Server 26.7.0 - High - INSTALL COMPONENT qualified scheme - plugin_dir skip

abraxas/mysql-jdv-definer-sqli

MySQL Community Server 26.7.0 - High - JSON Duality DEFINER SQLi - NO_BACKSLASH_ESCAPES

abraxas/mysql-mysqldump-tab-path

MySQL Community Server 26.7.0 - High - mysqldump --tab path leftover - client file write

abraxas/mysql-set-role-leftover

MySQL Community Server 26.7.0 - High - SET ROLE ALL EXCEPT leftover FILE - mysqld UID write

abraxas/sqlite-cli-recover

SQLite 3.53.4 CLI - High - Local - Command injection - recover dump emits hostile schema as dot-command

abraxas/sqlite-collate-depth

SQLite 3.53.4 - High - Local - Crash - COLLATE chain skips SQLITE_LIMIT_EXPR_DEPTH

abraxas/sqlite-cte-nest

SQLite 3.53.4 - High - Local - Crash - nested CTEs skip nNestSel view-depth cap

abraxas/sqlite-fj-using-auth

SQLite 3.53.4 - High - Local - Privilege leftover - FULL JOIN USING skips sqlite3AuthRead

abraxas/sqlite-fts5-securedel

SQLite 3.53.4 - High - Local - Crash - FTS5 secure-delete PutVarint footer overrun

abraxas/sqlite-rtree-rowid0

SQLite 3.53.4 - High - Local - UAF - rtree last_insert_rowid 0 node hash

abraxas/sqlite-session-ncol

SQLite 3.53.4 - High - Local - heap OOB write - session changeset same-name nCol growth

abraxas/sqlite-values-union

SQLite 3.53.4 - High - Local - Crash - VALUES UNION ALL fallback cleanup stack overflow

abraxas/sqlite-wal-pagesize

SQLite 3.53.4 - High - Local - Info leak - WAL/DB page-size mismatch uninitialized page tail

abraxas/sqlite-xfer-auth

SQLite 3.53.4 - High - Local - Privilege leftover - INSERT SELECT xfer skips source READ

abraxas/cakephp-collate-sqli

CakePHP 5.4.2 - High - Remote - SQLi - COLLATE collation is a raw SQL fragment