Lucene search
K

2885 matches found

NVD
NVD
added 2024/04/16 10:15 p.m.14 views

CVE-2024-21058

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise Unified Audit...

4.9CVSS5AI score0.00228EPSS
Exploits0References1
OSV
OSV
added 2024/04/16 10:15 p.m.1 views

CVE-2024-20995

Vulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise Oracle...

2.4CVSS7.1AI score
Exploits0References1
CVE
CVE
added 2024/04/16 9:26 p.m.94 views

CVE-2024-21093

The CVE-2024-21093 entry concerns the Java VM component of Oracle Database Server. Affected are Oracle Database Server versions 19.3–19.22 and 21.3–21.13. The issue allows a low-privileged user with Create Session/Create Procedure and network access via Oracle Net to compromise the Java VM, with ...

5.3CVSS5.8AI score0.00566EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/04/16 9:26 p.m.80 views

CVE-2024-21066

CVE-2024-21066 affects Oracle Database Server RDBMS component. Affected versions are 19.3–19.22 and 21.3–21.13. The issue allows a high-privileged, authenticated user with logon access to compromise the RDBMS, with human interaction required. Exploitation is described as feasible by an authentica...

4.2CVSS5.3AI score0.00239EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/04/16 9:26 p.m.84 views

CVE-2024-21058

CVE-2024-21058 affects Oracle Database Server’s Unified Audit component. Affected: Oracle Database Server versions 19.3–19.22 and 21.3–21.13 . Root cause described as insufficient input validation in the Unified Audit path (per connected PT Security entry). A highly privileged attacker with SYSDB...

4.9CVSS6.5AI score0.00228EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/04/16 12:0 a.m.5 views

Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability exists in the Java VM of Oracle Database Server. An attacker can exploit...

5.3CVSS7.3AI score0.00566EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/04/16 12:0 a.m.3 views

PT-2024-3527 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.22 Oracle Database Server versions 21.3 through 21.13 Description: The issue is related to insufficient input validation in the Unified Audit component of Oracle Database Server. This can allow ...

6.1CVSS7AI score0.00228EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/04/16 12:0 a.m.3 views

Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Oracle Database Sharding for Oracle Database Server. An attacker...

2.4CVSS7.1AI score0.00109EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/04/16 12:0 a.m.2 views

PT-2024-3524 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.22 Oracle Database Server versions 21.3 through 21.13 Description: The issue is related to the RDBMS component of Oracle Database Server, allowing a high-privileged attacker with authenticated...

4.3CVSS6.8AI score0.00239EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/04/16 12:0 a.m.1 views

Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Oracle Database Server's RDBMS. An attacker can exploit this...

4.2CVSS7.3AI score0.00239EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/04/16 12:0 a.m.1 views

Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Oracle Database Server's Unified Audit. An attacker exploiting th...

4.9CVSS7.2AI score0.00228EPSS
Exploits0References4
OSV
OSV
added 2024/04/09 5:15 p.m.1 views

CVE-2024-28945

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01782EPSS
Exploits0References1
OSV
OSV
added 2024/04/09 5:15 p.m.1 views

CVE-2024-28944

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.02618EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.1 views

PT-2024-3170

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to a use-after-free memory vulnerability in the Microsoft ODBC Driver for SQL Server. This vulnerability can be exploited by a remote...

10CVSS9.2AI score0.03993EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.1 views

PT-2024-3117 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

10CVSS9.4AI score0.0298EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.1 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS8.9AI score0.02216EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.2 views

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...

8.8CVSS8.9AI score0.01767EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.2 views

PT-2024-3113 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

10CVSS9.4AI score0.02216EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.2 views

PT-2024-3127 · Microsoft · Ole Db Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft OLE DB Driver for SQL Server affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft OLE DB Driver for SQL Server. This allows a remote attacker to execute arbitrary code...

10CVSS9.4AI score0.0298EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.3 views

PT-2024-3018 · Microsoft · Wdac Ole Db Provider For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue is related to a buffer overflow in the heap, allowing remote attackers to execute arbitrary code and affect the system. This can potentially...

10CVSS9.5AI score0.0298EPSS
Exploits0References9
Rows per page
Query Builder