Lucene search
+L

42 matches found

Github Security Blog
Github Security Blog
•added 2022/05/24 5:27 p.m.•35 views

Guard bypass in Eloquent models affecting Laravel illuminate database component

An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database component in some situations in which table names are stripped during a mass assignment...

7.5CVSS6.6AI score0.01203EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2022/02/15 6:15 p.m.•33 views

CVE-2021-43049

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO...

10CVSS0.01326EPSS
SaveExploits0References2
Prion
Prion
•added 2022/02/15 6:15 p.m.•34 views

Privilege escalation

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO...

10CVSS9.2AI score0.01326EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/02/15 5:55 p.m.•45 views

CVE-2021-43049 TIBCO BusinessConnect Container Edition username and password leakage

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO...

9.8CVSS9.6AI score0.01326EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/11/26 12:00 a.m.•10 views

Vulnerability of the MySQL Server component of the database management system: This component allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.8CVSS6.5AI score0.02365EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/02/11 12:00 a.m.•15 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to cause a service failure.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to completely disrupt service delivery using the OracleNet network protocol...

7.7CVSS7.2AI score0.01318EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2020/01/23 5:15 p.m.•35 views

CVE-2019-16153

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

9.8CVSS9.5AI score0.0115EPSS
SaveExploits0References1
CVE
CVE
•added 2020/01/23 4:39 p.m.•92 views

CVE-2019-16153

Fortinet FortiSIEM is affected by CVE-2019-16153 due to a hard-coded credential vulnerability in the FortiSIEM database component (versions 5.2.5 and below). An attacker could gain unauthorized access to the device database via static credentials. Red Hat/Symantec and Fortinet advisories corrobor...

9.8CVSS9.4AI score0.0115EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2020/01/23 4:39 p.m.•18 views

CVE-2019-16153

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

7.3AI score0.0115EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/01/23 4:39 p.m.•47 views

CVE-2019-16153

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

9.5AI score0.0115EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/10/18 12:00 a.m.•15 views

Unspecified Vulnerability in Oracle Database Server (CNVD-2017-30892)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. An unspecified vulnerability exists in the XML Database component of Oracle Database Server, which could be exploited by an attacker...

6.5CVSS6.5AI score0.01297EPSS
SaveExploits0References1
OSV
OSV
•added 2017/05/22 5:29 a.m.•4 views

CVE-2017-6983

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

8.8CVSS7.6AI score0.01953EPSS
SaveExploits0References4
CNVD
CNVD
•added 2016/10/20 12:00 a.m.•23 views

Unspecified Vulnerability in Oracle Database Server Kernel PDB Component (CNVD-2016-09687)

Oracle Database Server is the United States Oracle Oracle company's set of relational database management system. Kernel PDB is one of the kernel program database file components. A local security vulnerability exists in the Kernel PDB component of Oracle Database Server version 12.1.0.2. An...

6CVSS6.3AI score0.00373EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/01/23 12:00 a.m.•18 views

Oracle Database XDB - Unspecified Vulnerability in XML Database Component (CNVD-2016-00552)

Oracle Database is a large database of commercial nature. An unspecified security vulnerability in the Oracle Database XDB - XML Database component could be exploited by remote attackers to conduct denial-of-service attacks...

4CVSS8.9AI score0.01764EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2015/10/30 9:59 a.m.•27 views

CVE-2007-5601

Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions including 10, RealOne Player, and RealOne Player 2, allows remote attackers to execute arbitrary code via certain playlist names, as demonstrated via the import...

9.3CVSS8.8AI score0.42365EPSS
SaveExploits10References2
Tenable Nessus
Tenable Nessus
•added 2015/09/25 12:00 a.m.•33 views

Symantec Web Gateway Database < 5.0.0.1277 Multiple Vulnerabilities (SYM15-009) (credentialed check)

According to its self-reported version number, the remote web server is hosting a version of Symantec Web Gateway with a database component prior to version 5.0.0.1277. It is, therefore, affected by multiple vulnerabilities : - A flaw exists that allows the bypassing of access redirect...

8.5CVSS6.1AI score0.05122EPSS
SaveExploits0References9
Prion
Prion
•added 2015/07/16 11:00 a.m.•34 views

Design/Logic Flaw

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management...

5CVSS6.2AI score0.02788EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2015/07/16 10:00 a.m.•41 views

CVE-2015-4735

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management...

5.7AI score0.02788EPSS
SaveExploits0References3
CNVD
CNVD
•added 2015/01/22 12:00 a.m.•12 views

Unspecified Vulnerability in Oracle E-Business Suite Oracle Applications DBA Component (CNVD-2015-00515)

Oracle E-Business Suite is a new generation of e-business suite from Oracle. A security vulnerability exists in the Oracle E-Business Suite Oracle Applications DBA component that could be exploited by remote attackers to compromise system confidentiality, availability, and integrity...

4.6CVSS6.8AI score0.009EPSS
SaveExploits0References1
NVD
NVD
•added 2007/10/20 8:17 p.m.•37 views

CVE-2007-5601

Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions including 10, RealOne Player, and RealOne Player 2, allows remote attackers to execute arbitrary code via certain playlist names, as demonstrated via the import...

9.3CVSS7.9AI score0.42365EPSS
SaveExploits10References10
Rows per page
Query Builder