Lucene search
+L

3819 matches found

BDU FSTEC
BDU FSTEC
•added 2022/06/17 12:00 a.m.•16 views

The vulnerability of the Oracle Text component of the Oracle Database Server database management system allows a perpetrator to execute arbitrary code.

The vulnerability of the Oracle Text component in the Oracle Database Server database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the Oracle Net network protocol...

9CVSS7.7AI score0.01EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/06/17 12:00 a.m.•13 views

The vulnerability of the Oracle XML DB component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to critical data.

The vulnerability of the Oracle XML DB component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to critical data or full access to all available data in the Oracle...

6.8CVSS6.6AI score0.00901EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2022/06/15 10:15 p.m.•10 views

CVE-2022-29143

Microsoft SQL Server Remote Code Execution Vulnerability...

7.5CVSS6AI score0.01955EPSS
SaveExploits0References3Affected Software10
BDU FSTEC
BDU FSTEC
•added 2022/06/15 12:00 a.m.•15 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to cause a service failure.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a complete service outage using the Oracle Net protocol...

4.3CVSS6.4AI score0.00782EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/06/15 12:00 a.m.•18 views

The vulnerability of the Java VM component of the Oracle Database Server system allows a hacker to cause partial service disruption.

The vulnerability of the Java VM component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a partial service failure using the Oracle Net network protocol...

4.3CVSS6.4AI score0.0084EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/06/08 12:00 a.m.•16 views

The vulnerability of the Oracle XML DB component of the Oracle Database Server database management system allows a perpetrator to execute arbitrary code.

The vulnerability of the Oracle XML DB component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the Oracle Net protocol...

9CVSS7.7AI score0.01EPSS
SaveExploits0References3Affected Software1
MariaDBUnix
MariaDBUnix
•added 2022/05/25 12:00 a.m.•23 views

CVE-2022-31623

Disclaimer: This data contains information about vulnerable...

5.5CVSS6.2AI score0.0023EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2022/05/24 5:27 p.m.•34 views

Missing permission checks in Jenkins Database Plugin

A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified credentials. Database Plugin 1.7 requires Overall/Administer permission for the affected form...

6.5CVSS6.1AI score0.00715EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/05/11 12:00 a.m.•16 views

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to remotely gain access to modify, add, or delete data through various network protocols...

6.8CVSS6.9AI score0.0072EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2022/05/09 7:15 p.m.•6 views

CVE-2022-30335

Bonanza Wealth Management System BWM 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component...

9.8CVSS7.4AI score0.01231EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/05/09 12:00 a.m.•51 views

Fedora: Security Advisory for mariadb (FEDORA-2022-5cfe372ab7)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7AI score0.00689EPSS
SaveExploits7References2
OpenVAS
OpenVAS
•added 2022/05/09 12:00 a.m.•31 views

Fedora: Security Advisory for mariadb (FEDORA-2022-03350936ee)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7AI score0.00689EPSS
SaveExploits7References2
Veracode
Veracode
•added 2022/05/04 8:44 a.m.•38 views

Remote Code Execution

com.bstek.ureport:ureport2-console is vulnerable to remote code execution. A remote attacker is able to read sensitive user files and deserialize local gadgets by connecting the system to a malicious database server...

9.8CVSS4.7AI score0.03194EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2022/05/03 12:00 a.m.•75 views

GHSA-W39X-CHVM-PJ3C Deserialization of Untrusted Data in com.bstek.ureport:ureport2-console

All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...

9.8CVSS6AI score0.03194EPSS
SaveExploits1References4
NVD
NVD
•added 2022/05/01 4:15 p.m.•34 views

CVE-2022-25767

All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...

9.8CVSS0.03194EPSS
SaveExploits1References2
Mend
Mend
•added 2022/05/01 3:30 p.m.•2 views

CVE-2022-25767

All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...

9.8CVSS0.03194EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/05/01 3:30 p.m.•49 views

CVE-2022-25767 Remote Code Execution

All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...

9.8CVSS9.8AI score0.03194EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/05/01 3:25 p.m.•10 views

CVE-2022-25767

All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...

9.8CVSS7.4AI score0.03194EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/01 12:00 a.m.•6 views

CVE-2022-25767: Deserialization of Untrusted Data

All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitrary file read and deserialization of local gadgets...

9.8CVSS8.3AI score0.03194EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/05/01 12:00 a.m.•3 views

PT-2022-17500

Name of the Vulnerable Software and Affected Versions com.bstek.ureport:ureport2-console affected versions not specified Description The issue allows for Remote Code Execution by connecting to a malicious database server. This can cause arbitrary file read and deserialization of local gadgets...

9.8CVSS0.03194EPSS
SaveExploits1References6
Rows per page
Query Builder