Lucene search
+L

261 matches found

RedHat Linux
RedHat Linux
added 2019/10/10 12:49 p.m.5 views

jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver

A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using Oracle JDBC classes when using DefaultTyping. An attacker could use this flaw to achieve remote code execution under certain circumstances...

7.5CVSS8AI score0.08944EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2019/09/17 1:45 p.m.6 views

jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver

A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using Oracle JDBC classes when using DefaultTyping. An attacker could use this flaw to achieve remote code execution under certain circumstances...

7.5CVSS8AI score0.08944EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2019/08/16 12:0 a.m.10 views

Fedora Update for mariadb-connector-odbc FEDORA-2019-60befaed69

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2019/08/15 6:10 p.m.19 views

[SECURITY] Fedora 30 Update: mariadb-connector-odbc-3.1.2-1.fc30

MariaDB Connector/ODBC is a standardized, LGPL licensed database driver usi ng the industry standard Open Database Connectivity ODBC API. It supports OD BC Standard 3.5, can be used as a drop-in replacement for MySQL Connector/ODBC, and it supports both Unicode and ANSI modes...

1.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2019/05/08 12:12 p.m.8 views

jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver

A vulnerability was discovered in jackson-databind where it would permit deserialization of a malicious object using Oracle JDBC classes when using DefaultTyping. An attacker could use this flaw to achieve remote code execution under certain circumstances...

7.5CVSS8AI score0.08944EPSS
SaveExploits0References4
nodejs
nodejs
added 2019/01/15 7:37 p.m.18 views

NoSQL Injection

Overview Versions of loopback-connector-mongodb prior to 3.6.0 are vulnerable to NoSQL Injection. Filters passed to the database query are not properly sanitized which leads to execution of code on the database driver and data leak. Recommendation Upgrade to version 3.6.0 or later. References -...

7.2AI score
SaveExploits0Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2018/09/14 12:0 a.m.30 views

Microsoft Windows Excel Database Driver FORMULA Record Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the msexcl40.d...

6.8CVSS3.8AI score0.22757EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/09/14 12:0 a.m.44 views

Microsoft Windows Excel Database Driver Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the msexcl40.d...

6.8CVSS3.7AI score0.22757EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2018/05/31 12:0 a.m.8 views

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database driver for Windows operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.3CVSS8.6AI score0.23644EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/03/15 12:0 a.m.9 views

Micro Focus NetIQ Identity Manager JDBC Driver Information Disclosure Vulnerability

Micro Focus NetIQ Identity Manager is an identity management solution from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization.JDBC driver is one of the database connection...

9.8CVSS6.7AI score0.00852EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2017/10/10 7:0 a.m.72 views

"Unexpected error from external database driver" error when you create or open Microsoft Excel .xls files

None None...

9.3CVSS7AI score0.23119EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2017/07/20 12:0 a.m.10 views

The vulnerability of the DBD::mysql driver’s DBD::mysql module allows a attacker to cause a service failure or exert other effects.

The vulnerability of the DBD::mysql driver’s module is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects such as the termination of the application through MySQL server error messages or by losing...

7.5CVSS7AI score0.04629EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2017/04/20 12:0 a.m.5 views

Oracle MySQL Connectors Local Vulnerability

OracleMySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability , etc. MySQLConnectors is one of the connection to the use of MySQL application driver . Oracle MySQL Connectors has a local securi...

3.3CVSS8.4AI score0.00448EPSS
SaveExploits0References1
OSV
OSV
added 2017/02/17 2:59 a.m.6 views

DEBIAN-CVE-2016-1249

The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service out-of-bounds read via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression...

5.9CVSS7.2AI score0.02428EPSS
SaveExploits0References1
OSV
OSV
added 2017/02/17 2:59 a.m.6 views

UBUNTU-CVE-2016-1249

The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service out-of-bounds read via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression...

5.9CVSS6.9AI score0.02428EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2017/01/06 12:0 a.m.29 views

FreeBSD : codeigniter -- multiple vulnerabilities (5e439ee7-d3bd-11e6-ae1b-002590263bf5)

The CodeIgniter changelog reports : Fixed a SQL injection in the 'odbc' database driver. Updated setrealpath Path Helper function to filter-out php:// wrapper inputs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from th...

5.7AI score
SaveExploits0References2
OSV
OSV
added 2016/11/29 8:59 p.m.5 views

UBUNTU-CVE-2016-1251

There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI MySQL driver for Perl 3.x and 4.x before 4.041 when used with mysqlserverprepare=1...

8.1CVSS7.2AI score0.03118EPSS
SaveExploits0References6
OSV
OSV
added 2016/11/29 8:59 p.m.3 views

DEBIAN-CVE-2016-1251

There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI MySQL driver for Perl 3.x and 4.x before 4.041 when used with mysqlserverprepare=1...

8.1CVSS6.9AI score0.03118EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/11/17 12:0 a.m.9 views

DBD :: mysql outer boundary read information disclosure vulnerability

DBD::mysql is a Perl5 Database Interface DBI driver for MySQL. DBD :: mysql suffers from an outer boundary read information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

5.9CVSS6.4AI score0.02428EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/10/11 12:0 a.m.59 views

Perl DBD::mysql module buffer overflow vulnerability

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall.DBD::mysql is used for one of the MySQL Perl5 Database Interface Database Interface, DBI driver module. A buffer overflow vulnerability exists in the Perl DBD::mysql module prior to version...

7.5CVSS7AI score0.0406EPSS
SaveExploits0References1
Rows per page
Query Builder