3819 matches found
The vulnerability of the Oracle Text component of the Oracle Database Server database management system allows a perpetrator to execute arbitrary code.
The vulnerability of the Oracle Text component in the Oracle Database Server database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the Oracle Net network protocol...
The vulnerability of the Oracle XML DB component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to critical data.
The vulnerability of the Oracle XML DB component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to critical data or full access to all available data in the Oracle...
CVE-2022-29143
Microsoft SQL Server Remote Code Execution Vulnerability...
The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to cause a service failure.
The vulnerability of the Core RDBMS component of the database management system Oracle Database Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a complete service outage using the Oracle Net protocol...
The vulnerability of the Java VM component of the Oracle Database Server system allows a hacker to cause partial service disruption.
The vulnerability of the Java VM component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a partial service failure using the Oracle Net network protocol...
The vulnerability of the Oracle XML DB component of the Oracle Database Server database management system allows a perpetrator to execute arbitrary code.
The vulnerability of the Oracle XML DB component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the Oracle Net protocol...
CVE-2022-31623
Disclaimer: This data contains information about vulnerable...
Missing permission checks in Jenkins Database Plugin
A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified credentials. Database Plugin 1.7 requires Overall/Administer permission for the affected form...
The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to modify, add, or delete data.
The vulnerability of the Java VM component of the Oracle Database Server management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to remotely gain access to modify, add, or delete data through various network protocols...
CVE-2022-30335
Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...
Fedora: Security Advisory for mariadb (FEDORA-2022-5cfe372ab7)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for mariadb (FEDORA-2022-03350936ee)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Remote Code Execution
com.bstek.ureport:ureport2-console is vulnerable to remote code execution. A remote attacker is able to read sensitive user files and deserialize local gadgets by connecting the system to a malicious database server...
GHSA-W39X-CHVM-PJ3C Deserialization of Untrusted Data in com.bstek.ureport:ureport2-console
All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...
CVE-2022-25767
All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...
CVE-2022-25767
All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...
CVE-2022-25767 Remote Code Execution
All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...
CVE-2022-25767
All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...
CVE-2022-25767: Deserialization of Untrusted Data
All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...
PT-2022-17500
Name of the Vulnerable Software and Affected Versions com.bstek.ureport:ureport2-console affected versions not specified Description The issue allows for Remote Code Execution by connecting to a malicious database server. This can cause arbitrary file read and deserialization of local gadgets...