[20151201] - Core - Remote Code Execution Vulnerability

Browser information is not filtered properly while saving the session values into the database which leads to a Remote Code Execution vulnerability...

The vulnerability of the SAP HANA database management system allows a hacker to execute arbitrary code.

The vulnerability of the SAP HANA database management system’s SQL interface exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the SQL server authentication process...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

Vulnerability of the Server sub-component: The InnoDB database management system in MySQL is vulnerable to errors in its code. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server sub-component: The Parser component of the MySQL database management system is vulnerable due to code errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Oracle Database database management system allows a hacker to modify data.

The vulnerability of the RDBMS component of the database management system Oracle Database is related to errors in the code. Exploiting this vulnerability allows a malicious actor to perform unauthorized updates, insertions, deletions, or gain unauthorized read access to data...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server sub-component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Oracle Database database management system allows a hacker to execute arbitrary code with administrator privileges.

The vulnerability of the Portable Clusterware component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with administrator privileges...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server sub-component in the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the SAP HANA database management system allows a hacker to execute arbitrary web or HTML code.

The vulnerability of the Development Workbench component of the SAP HANA database management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary web or HTML code remotely...

JVN#58615092: Enisys Gw vulnerable to SQL injection

Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains an SQL injection vulnerability CWE-89. Impact Information stored in the database may be obtained or altered by a remote unauthenticated attacker. Solution Update the Software Update to the latest versio...

Network Applied Communication Laboratory Pref Shimane CMS SQL Injection Vulnerability

Network Applied Communication Laboratory Pref Shimane CMS is an open source content management system CMS from Network Applied Communication Laboratory in Japan. A SQL injection vulnerability exists in Network Applied Communication Laboratory Pref Shimane CMS. A remote attacker can exploit this...

Password Safe And Repository Enterprise 7.4.4 Build 2247 Crypto Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-037 Products: Password Safe and Repository Enterprise Manufacturer: MATESO GmbH Affected Versions: 7.4.4 Build 2247 Tested Versions: 7.4.4 Build 2247 Vulnerability Type: Insufficiently Protected Credentials CWE-522 Use of a...

CVE-2015-7381

Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database aka refbase through 0.9.6 allow remote attackers to execute arbitrary PHP code via the 1 pathToMYSQL or 2 databaseStructureFile parameter, a different issue than CVE-2015-6008...

The vulnerability of the MySQL database management system allows attackers to compromise the accessibility of protected information.

The vulnerability of the Server sub-component: Memcached in the MySQL database management system is related to code errors. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

The vulnerability of the Berkeley DB database management system allows a hacker to compromise the integrity and accessibility of the data.

The vulnerability of the Data Store component of the Berkeley DB database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the integrity and accessibility of the data...

The vulnerability of the MySQL database management system allows a hacker to compromise the accessibility of data.

Vulnerability of the Server sub-component: The partitioning of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of data remotely...

The vulnerability of the Berkeley DB database management system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the Data Store component of the Berkeley DB database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of data...

mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML...

mysql: unspecified vulnerability related to Server:DDL (CPU April 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to DDL...

SQL Injection Vulnerability in Teacher Training Platform of Zibo Kuanzheng Digital Network Technology Co.

Teacher training platform is a teaching system developed by Zibo Kuanzheng Digital Network Technology Co. A SQL injection vulnerability exists in the Teacher Training Platform of Zibo Kuanzheng Digital Network Technology Co. Ltd, which allows attackers to exploit this vulnerability to obtain...