42 matches found
CVE-2023-22074
CVE-2023-22074 CVE-2023-22074 vulnerability in oracle database sharding component 19c,21c,23c https://databasesecurityninja.wordpress.com/2023/10/25/cve-2023-22074-oracle-database-password-hash-exposure-in-sharding-component/...
CVE-2026-71049
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70806
creationtimestamp| type| source ---|---|--- 2026-08-19 16:51:01+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70773
creationtimestamp| type| source ---|---|--- 2026-08-19 16:45:24+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
ROS-20260724-73-0016
The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
EUVD-2026-40004
A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...
TrueConf Server Database Code Execution
The vulnerability of the database component of the TrueConf Server software lies in the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ModulithShop Trust Management Vulnerabilities
ModulithShop is an online shopping mall system from the individual developers of Shopsuite. ModulithShop suffers from a Trust Management Issue vulnerability that stems from misbehavior of the component RSA/OAuth2/Database, which could lead to hard-coded credentials...
EUVD-2016-0507
Malware in sbrugna...
EUVD-2015-0492
Malware in sbrugna...
EUVD-2023-31437
Malicious code in bioql PyPI...
Joomla! Database quoteNameStr Method Use-After-Free
The vulnerability of the quoteNameStr method in the Database package of the Joomla! Content Management System is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility ...
Oracle Database Server security vulnerabilities
Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability in the XML Database component of Oracle Database Server, versions 19.3...
UBUNTU-CVE-2024-57661
An issue in the sqlodf component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-27701
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...
CVE-2023-27701
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...
CVE-2022-41223
The Director database component of MiVoice Connect through 19.3 22.22.6100.0 could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type...
Code injection
The Director database component of MiVoice Connect through 19.3 22.22.6100.0 could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type...
CVE-2022-41223
The Director database component of MiVoice Connect through 19.3 22.22.6100.0 could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value...
GHSA-C7RM-W2HJ-X8G3 Guard bypass in Eloquent models affecting Laravel illuminate database component
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database component in some situations in which table names are stripped during a mass assignment...