96 matches found
CVE-2021-27950
A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA...
CVE-2021-2173
Vulnerability in the Recovery component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA Level Account privilege with network access via Oracle Net to compromise Recover...
PT-2021-2873 · Oracle · Oracle Database Server +1
Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.1.0.2, 12.2.0.1, 18c, and 19c Description: The issue is related to the Recovery component of Oracle Database Server, where an easily exploitable vulnerability allows a high-privileged attacker with DBA Level...
MGASA-2019-0280 Updated openldap packages fix security vulnerabilities
Updated openldap packages fix security vulnerabilities: It was discovered that OpenLDAP incorrectly handled rootDN delegation. A database administrator could use this issue to request authorization as an identity from another database, contrary to expectations CVE-2019-13057. It was discovered th...
CVE-2018-1633
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onsrvapd. IBM X-Force ID: 144434...
Code injection
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in oninit mongohash. IBM X-Force ID: 144431...
CVE-2018-1630
IBM Informix Dynamic Server (IDS) Privilege Escalation (CVE-2018-1630) affects IDS v12.10 (Enterprise) where a local DBA can gain root via a symbolic link vulnerability in onmode. The IBM advisory (IDS security bulletin) confirms the root cause as a symbolic link issue and lists a remediation: up...
The vulnerability of the DataPump component of the Oracle Database Server RDBMS system allows a hacker to gain full control over the system.
The vulnerability of the RDBMS DataPump component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, who has administrative privileges as a database administrator, to gain full control over the...
Man-in-the-middle Hijacking Vulnerability in Damon Database Management System
Damon database management system is a high-performance database management system with completely independent intellectual property rights launched by Damon, referred to as DM. There is a man-in-the-middle hijacking vulnerability in Damon Database Management System, which can be exploited by an...
Oracle Database Backup Fails With Event ID 44
Challenge Veeam Backup & Replication or Veeam Agent for Microsoft Windows jobs with Application-Aware Processing fail to process a Windows guest with Oracle database installed. The following symptoms are observed. The job fails with this or a similar error: Creating VSS snapshot Error: Failed to...
Damon Database Vulnerability for Overstepping Authority and Tampering with Data
DM7 is a new-generation database product designed by Damon on the basis of summarizing the R&D and application experience of DM series products, absorbing the advantages of mainstream database products, and adopting JAVA-like virtual machine technology. DM7 database has the vulnerability of...
Damon database suffers from a power lifting vulnerability (CNVD-2018-03642)
DM7 is a new-generation database product designed by Damon on the basis of summarizing the R&D and application experience of DM series products, absorbing the advantages of mainstream database products and adopting JAVA-like virtual machine technology. DM7 database has a privilege loophole,...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-02400)
Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...
Vulnerability in contrib module (CVE-2017-12172)
Start scripts permit database administrator to modify root-owned files...
Information disclosure
IBM Spectrum Protect 7.1 and 8.1 formerly Tivoli Storage Manager Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force I...
Damon Database Server Override Access Vulnerability
Damon Database Management System is a database management system introduced by Damon, abbreviated as DM. Damon database server has an override access vulnerability that can be exploited by an attacker to illegally obtain the DBA role and then control the entire database...
CVE-2017-1508
IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620...
CVE-2017-1508
IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620...
