Lucene search
+L

275 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 5:33 a.m.•14 views

SUSE CVE-2013-7491

An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated...

7.8CVSS7.1AI score0.02656EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:23 a.m.•8 views

SUSE CVE-2014-10402

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. NOTE: this issue exists because of an incomplete fix for CVE-2014-10401...

5.5CVSS7AI score0.00488EPSS
SaveExploits1References8
SUSE CVE
SUSE CVE
•added 2023/02/15 3:57 a.m.•11 views

SUSE CVE-2020-14393

A buffer overflow was found in perl-DBI 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data...

8.4CVSS7AI score0.00607EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2022/09/28 12:00 a.m.•25 views

The vulnerability of the DBI interface module of the Perl database library allows attackers to gain access to confidential data and also cause service interruptions.

The vulnerability of the DBI interface module in Perl DBI is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

6.2CVSS6.7AI score0.00488EPSS
SaveExploits1References11Affected Software4
Github Security Blog
Github Security Blog
•added 2022/05/14 2:05 a.m.•26 views

phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database name or 2 table name, related to the...

3.5CVSS6.3AI score0.01533EPSS
SaveExploits1References7Affected Software1
OpenVAS
OpenVAS
•added 2022/04/21 12:00 a.m.•22 views

Fedora: Security Advisory for pdns (FEDORA-2022-8367cefdea)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.05004EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/11/03 12:00 a.m.•82 views

Unspecified Vulnerability in Fortinet FortiPortal

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi and FortiAP product lines, available as a virtual machine for MSPs. A security vulnerability in the customer database interface of Fortinet FortiPortal prior ...

3.5CVSS6.8AI score0.0045EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/02 6:15 p.m.•49 views

CVE-2021-36181

A concurrent execution using shared resource with improper Synchronization vulnerability 'Race Condition' in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific...

3.5CVSS0.0045EPSS
SaveExploits0References1
Prion
Prion
•added 2021/11/02 6:15 p.m.•29 views

Race condition

A concurrent execution using shared resource with improper Synchronization vulnerability 'Race Condition' in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific...

3.5CVSS4.3AI score0.0045EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/11/02 6:15 p.m.•9 views

CVE-2021-36181

A concurrent execution using shared resource with improper Synchronization vulnerability 'Race Condition' in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific...

3.5CVSS6.1AI score0.0045EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2021/11/02 5:22 p.m.•16 views

CVE-2021-36181

A concurrent execution using shared resource with improper Synchronization vulnerability 'Race Condition' in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific...

3.1CVSS6.9AI score0.0045EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/02 5:22 p.m.•74 views

CVE-2021-36181

Fortinet FortiPortal CVE-2021-36181 is a race-condition in the customer database interface caused by improper thread synchronization. It affects FortiPortal prior to 6.0.6 and can allow an authenticated, low-privilege user to coordinate web requests to bring the underlying database data into an i...

3.5CVSS4.2AI score0.0045EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/02 12:00 a.m.•3 views

CVE-2021-36181: Concurrent Execution using Shared Resource with Improper Synchronization

A concurrent execution using shared resource with improper Synchronization vulnerability 'Race Condition' in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific...

3.5CVSS5.9AI score0.0045EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/11/02 12:00 a.m.•3 views

PT-2021-21163

Name of the Vulnerable Software and Affected Versions FortiPortal versions prior to 6.0.6 Description The issue is related to a concurrent execution using shared resources with improper synchronization, also known as a 'Race Condition', in the customer database interface. This may allow an...

3.5CVSS0.0045EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/07/20 12:00 a.m.•22 views

The vulnerability of the DBI interpreter component in the Perl programming language, related to writing beyond buffer boundaries, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the DBI interpreter for the Perl programming language is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

7.1CVSS7.3AI score0.00607EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/07/20 12:00 a.m.•39 views

The vulnerability of the DBI programming language module in Perl, related to an unvalidated return value, allows attackers to trigger a service failure.

The vulnerability of the DBI programming language module in Perl is related to an unvalidated return value in the hvFetch function when checking for the presence of NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...

4.7CVSS6.1AI score0.00486EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/05/05 12:00 a.m.•25 views

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence system, a business automation solution from Oracle E-Business Suite, allows a malicious individual to gain unauthorized access to the device and disclose protected information.

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence system, a business automation solution from Oracle E-Business Suite, is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the...

8.5CVSS6.7AI score0.01015EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2021/01/14 12:00 a.m.•21 views

SAP Business Information Warehouse SQL Injection Vulnerability

SAP Business Information Warehouse SAP BW is a data warehouse for collecting and tabulating information in an enterprise environment from SAP Germany. The software is an enterprise-wide information center for data analysis from R / 3 and other business applications, including databases and extern...

6.5CVSS7.7AI score0.01919EPSS
SaveExploits2References1
OSV
OSV
•added 2021/01/12 3:15 p.m.•13 views

CVE-2021-21468

The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the user to practically read out any database table...

6.5CVSS5.8AI score0.01919EPSS
SaveExploits2References4
NVD
NVD
•added 2021/01/12 3:15 p.m.•45 views

CVE-2021-21468

The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the user to practically read out any database table...

6.5CVSS6.6AI score0.01919EPSS
SaveExploits2References4
Rows per page
Query Builder