CVE-2021-2329

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle...

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

Design/Logic Flaw

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

UBUNTU-CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

CVE-2021-27021

CVE-2021-27021 affects Puppet DB. A flaw enables privilege escalation that allows a user to delete tables via an SQL query. This is corroborated across NVD, OSV, Nessus/NASL plugins, and OSV Debian/Ubuntu entries. The connected documents do not specify affected versions, root cause details, explo...

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

PT-2021-7197

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1 and 19c Description The issue is related to insufficient input validation in the Oracle XML DB component. It allows a high-privileged attacker with Create Any Procedure, Create Public Synonym...

CVE-2021-27021: Improper Neutralization of Special Elements used in an SQL Command

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

PT-2021-7152

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2 through 19c Description The issue is related to insufficient input validation in the Oracle XML DB component, allowing a high-privileged attacker with Alter User privilege and network access via Oracle...

PT-2021-6608 · Puppet · Puppetdb

Name of the Vulnerable Software and Affected Versions: Puppet DB affected versions not specified Description: A flaw in Puppet DB results in an escalation of privileges, allowing a user to delete tables via an SQL query. This issue is related to a lack of protection measures for the SQL query...

CVE-2021-2333: Undefined Security Weakness

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Alter User privilege with network access via Oracle Net to compromise Oracle XML DB...

CVE-2021-2337: Undefined Security Weakness

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle...

CVE-2021-2329: Undefined Security Weakness

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle...

PT-2021-7100

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2 through 19c Description The issue is related to insufficient input validation in the Oracle XML DB component, allowing a high-privileged attacker with network access via Oracle Net to compromise Oracle...

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management. a security vulnerability exists in the Oracle XML DB component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An...

db-systray (>=0.1.0, <=0.1.2), dbm-systray (>=0.1.3, <=0.2.0) +6 more potentially affected by CVE-2021-23404 via sqlite-web (>=0.6.8, <=0.8.2)

sqlite-web PYPI version =0.6.8, =0.1.0, =0.1.3, =0.0.2, =0.0.2, =0.0.1, =0.2.1, =0.1.8, =0.2.6 Source cves: CVE-2021-23404 Source advisory: SNYK:PYTHON-SQLITEWEB-1316324...