CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

576 matches found

zdt•added 2023/01/03 12:00 a.m.•427 views

Oracle DBMS_REDACT Dynamic Data Masking Bypass Vulnerability

Proof of concept overview on how the DBMSREDACT Dynamic Data Masking security feature in Oracle can be bypassed. Affected versions include 19c and 21c. Title: ByPassing DBMSREDACT Dynamic Data Masking security feature in Oracle database system Product: Database Manufacturer: Oracle Affected...

7AI score

SaveExploits0

Packet Storm•added 2023/01/03 12:00 a.m.•283 views

Oracle DBMS_REDACT Dynamic Data Masking Bypass

Title: ByPassing DBMSREDACT Dynamic Data Masking security feature in Oracle database system Product: Database Manufacturer: Oracle Affected Versions: 19c,21c Tested Versions: 19c,21c CVE Reference: N/A Author of Advisory: Emad Al-Mousa Overview: DBMSREDACT package provides an interface to Oracle...

7.4AI score

SaveExploits0

IBM Security Bulletins•added 2022/09/26 3:31 a.m.•25 views

Security Bulletin: InfoSphere Guardium Data Redaction Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

4.3CVSS7.5AI score0.67047EPSS

SaveExploits1

IBM Security Bulletins•added 2022/09/25 9:06 p.m.•33 views

Security Bulletin: InfoSphere Guardium Data Redaction affected by SSL vulnerability in Apache Axis2 (CVE-2012-5785)

Abstract An SSL vulnerability exists in Apache Axis which is used by InfoSphere Guardium Data Redaction to process HTTPS requests from the Redaction SOAP API . Content VULNERABILITY DETAILS: CVE ID: CVE-2012-5785 DESCRIPTION: Apache Axis2/Java, as used in multiple products, could allow a remote...

5.8CVSS5.4AI score0.02225EPSS

SaveExploits1

BDU FSTEC•added 2022/06/17 12:00 a.m.•12 views

The vulnerability of the Oracle Database - Enterprise Edition Data Redaction component of the Oracle Database Server system allows attackers to gain access to modify, add, or delete data.

The vulnerability of the Enterprise Edition Data Redaction component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data...

3.5CVSS6.4AI score0.00729EPSS

SaveExploits0References3Affected Software1

Prion•added 2022/03/10 5:47 p.m.•19 views

Design/Logic Flaw

Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments...

5CVSS7.5AI score0.01155EPSS

SaveExploits0References2Affected Software1

Positive Technologies•added 2022/02/15 12:00 a.m.•3 views

PT-2022-17127 · Jenkins · Jenkins Support Core Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Support Core Plugin versions 2.79 and earlier Description: The issue concerns the Jenkins Support Core Plugin, which does not properly redact some sensitive information in the support bundle. This could potentially expose sensitive...

6.5CVSS6.1AI score0.00966EPSS

SaveExploits0References11

IBM Security Bulletins•added 2021/12/15 10:57 a.m.•26 views

Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Supplier Lifecycle Mgmt (CVE-2021-2335)

Summary An Oracle database server vulnerability was addressed in IBM Emptoris Supplier Lifecycle Management. Vulnerability Details CVEID: CVE-2021-2335 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database - Enterprise Edition Data Redaction component could...

3.5CVSS3.8AI score0.00607EPSS