The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
An issue was discovered in phpMyAdmin. With a very large request to table partitioning function, it is possible to invoke a Denial of Service (DoS) attack. All 4.6.x versions (prior to 4.6.5) are affected.
Base Score: 5
Impact Score: 2.9
Exploitability Score: 10
Base Score: 7.5
Impact Score: 3.6
Exploitability Score: 3.9
|143532||phpMyAdmin 4.0.x < 184.108.40.206 / 4.4.x < 220.127.116.11 / 4.6.x < 4.6.5 Multiple Vulnerabilities||Nessus||CGI abuses|
|96426||GLSA-201701-32 : phpMyAdmin: Multiple vulnerabilities||Nessus||Gentoo Local Security Checks|
|9830||phpMyAdmin 4.0.10.x < 18.104.22.168 / 4.4.15.x < 22.214.171.124 / 4.6.x < 4.6.5 Multiple Vulnerabilities||Nessus Network Monitor||CGI|