CVE-2019-2871

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data...

CVE-2019-2760

CVE-2019-2760 affects the Data Store component of Oracle Berkeley DB. Affected versions include 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23, and 12.1.6.2.32. The vulnerability enables an unauthenticated attacker with access to the infrastructure where Data Store runs to compro...

CVE-2019-2760

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data...

CVE-2019-2760

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23 and 12.1.6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data...

Oracle Berkeley DB Component Access Control Error Vulnerability (CNVD-2019-29182)

Oracle Berkeley DB is the United States Oracle Oracle, an open source embedded database programming libraries , it can be with C, C++, Java, Perl, Python, Tcl and many other languages to bind . Data Store is one of the data storage components. A security vulnerability exists in the Data Store...

Oracle Berkeley DB Component Access Control Error Vulnerability (CNVD-2019-29181)

Oracle Berkeley DB is the United States Oracle Oracle, an open source embedded database programming libraries , it can be with C, C++, Java, Perl, Python, Tcl and many other languages to bind . Data Store is one of the data storage components. A security vulnerability exists in the Data Store...

Oracle Berkeley DB Component Access Control Error Vulnerability (CNVD-2019-29180)

Oracle Berkeley DB is the United States Oracle Oracle, an open source embedded database programming libraries, it can be with C, C++, Java, Perl, Python, Tcl and many other languages for binding. data Store is one of the data storage components. A security vulnerability exists in the Data Store...

Oracle Berkeley DB Component Access Control Error Vulnerability (CNVD-2019-29185)

Oracle Berkeley DB is the United States Oracle Oracle, an open source embedded database programming libraries , it can be with C, C++, Java, Perl, Python, Tcl and many other languages to bind . Data Store is one of the data storage components. A security vulnerability exists in the Data Store...

Oracle Berkeley DB Component Access Control Error Vulnerability (CNVD-2019-29184)

Oracle Berkeley DB is the United States Oracle Oracle, an open source embedded database programming libraries , it can be with C, C++, Java, Perl, Python, Tcl and many other languages to bind . Data Store is one of the data storage components. A security vulnerability exists in the Data Store...

Information Disclosure

nablarch-fw-web is vulnerable to information disclosure. Remote attackers are able to obtain information regarding stored data, register or modify invalid values due to incomplete cryptography of the data store function...

CVE-2019-11643

Persistent XSS has been found in the OneShield Policy Dragon Core framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated...

Design/Logic Flaw

Persistent XSS has been found in the OneShield Policy Dragon Core framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated...

CVE-2019-11643

Persistent XSS has been found in the OneShield Policy Dragon Core framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated...

Share This Image <= 1.19 - Stored XSS

Stored XSS occurs when a web application gathers input from a user which might be malicious, and then stores that input in a data store for later use. The input that is stored is not correctly filtered PoC Go to the Share This Image menu, and put " in the Selector field from the "What to Share"...

CVE-2019-2708

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data...

AZL-6630 CVE-2019-2708 affecting package libdb for versions less than 5.3.28-7

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data...

CVE-2019-2708

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data...

AZL-34927 CVE-2019-2708 affecting package libdb for versions less than 5.3.28-7

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data...

Code injection

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data...

CVE-2019-2708

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data...