Lucene search
K

2885 matches found

BDU FSTEC
BDU FSTEC
added 2023/05/04 12:0 a.m.1 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS6.3AI score0.00137EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2023/04/28 1:15 p.m.18 views

Code injection

On versions of Sage 300 2017 - 2022 6.4.x - 6.9.x which are setup in a "Windows Peer-to-Peer Network" or "Client Server Network" configuration, a low-privileged Sage 300 workstation user could abuse their access to the "SharedData" folder on the connected Sage 300 server to view and/or modify the...

4.3CVSS7.8AI score0.0006EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2023/04/21 12:0 a.m.20 views

Unspecified Vulnerability in Oracle Database Server (CNVD-2023-71322)

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server versions 19c and 21c. An...

6.8CVSS6.5AI score0.00401EPSS
Exploits0References1
Qualys Blog
Qualys Blog
added 2023/04/19 11:47 a.m.388 views

Oracle Patch Tuesday April 2023 Security Update Review

Oracle has released the second quarterly edition of Critical Patch Update, which contains a group of patches for 433 security vulnerabilities. Some of the vulnerabilities addressed this month impact various products. These patches address vulnerabilities in Oracle code and third-party components...

7.5CVSS9.5AI score0.94439EPSS
Exploits125
Tenable Nessus
Tenable Nessus
added 2023/04/19 12:0 a.m.54 views

Oracle Database Server (Apr 2023 CPU)

The 19c and 21c versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2023 CPU advisory. - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficul...

9.8CVSS7.4AI score0.93849EPSS
Exploits10References10
OSV
OSV
added 2023/04/18 8:15 p.m.1 views

CVE-2023-21934

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows low privileged attacker having User Account privilege with network access via TLS to compromise Java VM. Successful attacks of this...

6.8CVSS6.9AI score0.00862EPSS
Exploits0References1
Prion
Prion
added 2023/04/18 8:15 p.m.16 views

Design/Logic Flaw

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows low privileged attacker having User Account privilege with network access via TLS to compromise Java VM. Successful attacks of this...

3.6CVSS6.2AI score0.00862EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/18 12:0 a.m.2 views

Oracle Database Server 安全漏洞

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server version 19c, version 21c. An...

6.8CVSS6.7AI score0.00862EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/04/18 12:0 a.m.4 views

PT-2023-2642 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19c through 21c Description: The issue exists due to insufficient input validation in the Oracle Database Recovery Manager component of Oracle Database Server. This can be exploited by a remote attacker to caus...

6.8CVSS6.4AI score0.00401EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/04/18 12:0 a.m.3 views

Oracle Database Server 安全漏洞

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server versions 19c and 21c. An...

6.8CVSS6.5AI score0.00401EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/04/18 12:0 a.m.3 views

PT-2023-2526 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19c and 21c Description: The issue is related to insufficient input validation in the Java VM component of the Oracle Database Server. This can be exploited by a remote attacker to gain read, modify, add, or...

6.8CVSS6.7AI score0.00862EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/04/18 12:0 a.m.2 views

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. Oracle MySQL Server has a security vulnerability that can be exploited by attackers to cause a takeover of MySQL Server...

7.1CVSS6.2AI score0.00435EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/04/14 12:0 a.m.4 views

PT-2023-17438 · Datagear · Datagear

Name of the Vulnerable Software and Affected Versions: DataGear versions up to 4.7.0/5.1.0 Description: A problematic issue has been found in the JDBC Server Handler component of DataGear, allowing for deserialization through manipulation. This issue can be exploited remotely. The vendor was...

8.8CVSS6.4AI score0.00455EPSS
Exploits1References10
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.1 views

The vulnerability of the database server of the software solution for monitoring the status of B&R APROL industrial systems allows a hacker to read and modify configuration data.

The vulnerability of the database server of the B&R APROL software solution for monitoring the status of industrial systems is related to the absence of an authentication procedure. Exploiting this vulnerability allows a malicious actor to read and modify configuration data remotely...

9.7CVSS7.1AI score0.00251EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/21 12:0 a.m.1 views

The vulnerability of the Tbase database server of the software solution for monitoring the status of B&R APROL industrial systems allows a intruder to execute arbitrary code.

The vulnerability of the Tbase database server of the B&R APROL industrial system monitoring software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.0033EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/03/13 12:0 a.m.2 views

The vulnerability of the Tbase database server of the B&R APROL industrial system monitoring software allows a intruder to execute arbitrary code.

The vulnerability of the Tbase database server of the B&R APROL software solution for monitoring the status of industrial systems is related to the possibility of writing data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remote...

10CVSS8.4AI score0.01028EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.12 views

Debian: Security Advisory (DLA-709)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References4
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.26 views

Debian: Security Advisory (DSA-1997-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.6AI score0.75816EPSS
Exploits7References3
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.19 views

Debian: Security Advisory (DSA-1964-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS5.9AI score0.03854EPSS
Exploits5References3
RedHat Linux
RedHat Linux
added 2023/03/07 9:43 a.m.3 views

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS6.8AI score0.00436EPSS
Exploits0References4
Rows per page
Query Builder