Lucene search
+L

3818 matches found

BDU FSTEC
BDU FSTEC
•added 2023/05/12 12:00 a.m.•15 views

The vulnerability of the Client programs of the MySQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Client programs of the MySQL Server database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.1CVSS7.1AI score0.00826EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/05/12 12:00 a.m.•16 views

Vulnerability of the Server component: The DML of the MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the MySQL Server component exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

6.1CVSS6.3AI score0.01144EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
•added 2023/05/09 11:21 a.m.•15 views

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.39 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

4.9CVSS6.8AI score0.01501EPSS
SaveExploits0References4
OSV
OSV
•added 2023/05/09 12:00 a.m.•63 views

ALSA-2023:2621 Important: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql 8.0.32. BZ2177731, BZ2177732 Security Fixes: mysql: Server: Security:...

7.5CVSS6.4AI score0.43403EPSS
SaveExploits0References76
BDU FSTEC
BDU FSTEC
•added 2023/05/04 12:00 a.m.•14 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS6.3AI score0.01468EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2023/04/28 1:15 p.m.•29 views

Code injection

On versions of Sage 300 2017 - 2022 6.4.x - 6.9.x which are setup in a "Windows Peer-to-Peer Network" or "Client Server Network" configuration, a low-privileged Sage 300 workstation user could abuse their access to the "SharedData" folder on the connected Sage 300 server to view and/or modify the...

4.3CVSS7.8AI score0.00258EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2023/04/21 12:00 a.m.•75 views

Unspecified Vulnerability in Oracle Database Server (CNVD-2023-71322)

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server versions 19c and 21c. An...

6.8CVSS6.5AI score0.00668EPSS
SaveExploits0References1
Qualys Blog
Qualys Blog
•added 2023/04/19 11:47 a.m.•405 views

Oracle Patch Tuesday April 2023 Security Update Review

Oracle has released the second quarterly edition of Critical Patch Update, which contains a group of patches for 433 security vulnerabilities. Some of the vulnerabilities addressed this month impact various products. These patches address vulnerabilities in Oracle code and third-party components...

7.5CVSS7.9AI score0.99638EPSS
SaveExploits136
Tenable Nessus
Tenable Nessus
•added 2023/04/19 12:00 a.m.•69 views

Oracle Database Server (Apr 2023 CPU)

The 19c and 21c versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2023 CPU advisory. - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficul...

9.8CVSS7.1AI score0.99569EPSS
SaveExploits13References10
OSV
OSV
•added 2023/04/18 8:15 p.m.•16 views

CVE-2023-21934

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows low privileged attacker having User Account privilege with network access via TLS to compromise Java VM. Successful attacks of this...

6.8CVSS6.9AI score0.00536EPSS
SaveExploits0References1
Prion
Prion
•added 2023/04/18 8:15 p.m.•29 views

Design/Logic Flaw

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows low privileged attacker having User Account privilege with network access via TLS to compromise Java VM. Successful attacks of this...

3.6CVSS6.2AI score0.00536EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/04/18 12:00 a.m.•19 views

Oracle Database Server 安全漏洞

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server versions 19c and 21c. An...

6.8CVSS6.5AI score0.00668EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/04/18 12:00 a.m.•16 views

Oracle Database Server 安全漏洞

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server version 19c, version 21c. An...

6.8CVSS6.7AI score0.00536EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/04/18 12:00 a.m.•10 views

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. Oracle MySQL Server has a security vulnerability that can be exploited by attackers to cause a takeover of MySQL Server...

7.1CVSS6.2AI score0.00826EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/04/18 12:00 a.m.•14 views

PT-2023-2642 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19c through 21c Description: The issue exists due to insufficient input validation in the Oracle Database Recovery Manager component of Oracle Database Server. This can be exploited by a remote attacker to caus...

6.8CVSS6.4AI score0.00668EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/04/18 12:00 a.m.•14 views

PT-2023-2526 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19c and 21c Description: The issue is related to insufficient input validation in the Java VM component of the Oracle Database Server. This can be exploited by a remote attacker to gain read, modify, add, or...

6.8CVSS6.7AI score0.00536EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/18 12:00 a.m.•3 views

CVE-2023-21918: Undefined Security Weakness

Vulnerability in the Oracle Database Recovery Manager component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having Local SYSDBA privilege with network access via Oracle Net to compromise Oracle...

6.8CVSS5.8AI score0.00668EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/18 12:00 a.m.•2 views

CVE-2023-21934: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows low privileged attacker having User Account privilege with network access via TLS to compromise Java VM. Successful attacks of this...

6.8CVSS5.7AI score0.00536EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/04/14 12:00 a.m.•21 views

PT-2023-17438 · Datagear · Datagear

Name of the Vulnerable Software and Affected Versions: DataGear versions up to 4.7.0/5.1.0 Description: A problematic issue has been found in the JDBC Server Handler component of DataGear, allowing for deserialization through manipulation. This issue can be exploited remotely. The vendor was...

8.8CVSS6.4AI score0.01137EPSS
SaveExploits1References10
BDU FSTEC
BDU FSTEC
•added 2023/03/22 12:00 a.m.•14 views

The vulnerability of the database server of the software solution for monitoring the status of B&R APROL industrial systems allows a hacker to read and modify configuration data.

The vulnerability of the database server of the B&R APROL software solution for monitoring the status of industrial systems is related to the absence of an authentication procedure. Exploiting this vulnerability allows a malicious actor to read and modify configuration data remotely...

9.7CVSS7.1AI score0.00551EPSS
SaveExploits0References2
Rows per page
Query Builder