Lucene search
+L

3819 matches found

Positive Technologies
Positive Technologies
•added 2021/07/20 12:00 a.m.•1 views

PT-2021-7197

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1 and 19c Description The issue is related to insufficient input validation in the Oracle XML DB component. It allows a high-privileged attacker with Create Any Procedure, Create Public Synonym...

9CVSS0.01289EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•16 views

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management. a security vulnerability exists in the Oracle XML DB component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An...

7.2CVSS8.2AI score0.01EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•42 views

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is a relational database management system from Oracle Corporation. A security vulnerability exists in the Oracle Application Express Data Reporter component of Oracle Database Server versions prior to 21.1.0.00.04, which could be exploited by an attacker to cause...

5.4CVSS8.2AI score0.00504EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•18 views

Oracle Database Server 授权问题漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. A security vulnerability exists in the Advanced Networking Option component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c, which could be exploited to cause an attacker to take over...

8.3CVSS7.2AI score0.02432EPSS
SaveExploits5References28
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•17 views

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management.Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c contain a security vulnerability in the Oracle Database - Enterprise...

3.5CVSS8.3AI score0.00729EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•14 views

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management. a security vulnerability exists in the Oracle XML DB component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An...

7.2CVSS5.6AI score0.01289EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•4 views

CVE-2021-2333: Undefined Security Weakness

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Alter User privilege with network access via Oracle Net to compromise Oracle XML DB...

4.9CVSS5.8AI score0.00901EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•4 views

CVE-2021-2335: Undefined Security Weakness

Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access vi...

3.5CVSS5.8AI score0.00607EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•19 views

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management. an unspecified vulnerability exists in the Oracle Text component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. A...

7.2CVSS5.6AI score0.01EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•5 views

CVE-2021-2337: Undefined Security Weakness

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle...

7.2CVSS5.8AI score0.01289EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•4 views

CVE-2021-2328: Undefined Security Weakness

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Alter Any Table privilege with network access via Oracle Net to...

7.2CVSS5.8AI score0.01EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•6 views

CVE-2021-2329: Undefined Security Weakness

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle...

7.2CVSS5.8AI score0.01EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/07/20 12:00 a.m.•1 views

PT-2021-7112

Name of the Vulnerable Software and Affected Versions Oracle Application Express Data Reporter versions prior to 21.1.0.00.04 Description The issue is related to insufficient input validation in the Oracle Application Express Data Reporter component of Oracle Database Server. This easily...

7CVSS0.00504EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•4 views

CVE-2021-2438: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM...

4.3CVSS5.7AI score0.0084EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•19 views

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management.Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c contain a security vulnerability in the Oracle Database - Enterprise...

3.5CVSS8.3AI score0.00607EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/07/20 12:00 a.m.•3 views

PT-2021-7151

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1 and 19c Description The issue exists due to insufficient input validation in the Oracle Text component of Oracle Database Server. This allows a remote attacker to execute arbitrary code using...

9CVSS0.01EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•9 views

Oracle MySQL Server 输入验证错误漏洞

Oracle MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. A security vulnerability exists in the Server: Replication component in Oracle MySQL Server 5.7.34, 8.0.25 and earlier versions. An attacker can exploit this vulnerability to...

5.9CVSS6.9AI score0.02203EPSS
SaveExploits0References15
UbuntuCve
UbuntuCve
•added 2021/07/02 12:00 a.m.•51 views

CVE-2021-21704

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute, execute, fetch and others by returning invalid response data that is not...

5.9CVSS6.8AI score0.01796EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/28 12:00 a.m.•6 views

CVE-2021-32722: Uncontrolled Resource Consumption

GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an uncontrolled resource consumption vulnerability. A large amount of page moves within a short space of time could overwhelm Database servers due to improper handling of load...

6.5CVSS5.8AI score0.01332EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2021/06/04 5:56 a.m.•137 views

Exploit for CVE-2021-2173

CVE-2021-2173 CVE-2021-2173 PoC is explained here: ht...

4.1CVSS5AI score0.01372EPSS
SaveExploits4
Rows per page
Query Builder