Design/Logic Flaw

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors...

CVE-2020-7339

CVE-2020-7339 affects McAfee Database Security Server and Sensor prior to version 4.8.0. The vulnerability stems from the use of SHA-1 signed certificates, enabling an attacker on the same local network to potentially intercept communication between the Server and Sensors. Publicly available conn...

CVE-2020-7339 Database Security(DBS)-Use of a Broken or Risky Cryptographic Algorithm

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors...

Mcafee Database Security Server 和 Sensor 加密问题漏洞

Mcafee Database Security Server and Mcafee Database Security sensor are both products of Mcafee Corporation, China.Mcafee Database Security Server is a database security software. Mcafee Database Security Server is a database security software that provides users with an overall view of the...

SQL Injection Vulnerability in ILAS III Digital Library System (CNVD-2020-70576)

ILAS III digital library is a set of library automation integrated system that can adapt to the use of libraries of different levels, scales and types at home and abroad, which is undertaken and organized by the Shenzhen Library. ILAS III digital library system SQL injection vulnerability,...

Invariant failure in applyOps

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.10; v3.6 versions prior to 3.6.13...

SQL Injection Vulnerability in Zhengzhou Lanchuang Culture Communication Co.

Lantronix Network Marketing belongs to Zhengzhou Lantronix Culture Communication Co., Ltd, which is a professional network marketing service provider in China, focusing on seo marketing, sem marketing and social media marketing, etc. Lantronix Network Marketing is a professional network marketing...

SQL Injection Vulnerability in mkcms Backend

mkcms is a film and television management system developed specifically for different webmasters. There are SQL injection vulnerabilities in the mkcms backend, which can be exploited by attackers to gain access to sensitive database information...

SQL Injection Vulnerability in Xinbu Supply Chain System of Xi'an Xinbu Electronic Information Technology Co.

Xinbu Supply Chain System is a software that realizes retailer-supplier collaboration, new type of zero-supply relationship, online ordering, and online reconciliation functions. Xi'an Xinbu Supply Chain System of Xi'an Xinbu Electronic Information Technology Co., Ltd. suffers from a SQL injectio...

CVE-2018-20803

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10...

CVE-2018-20803

CVE-2018-20803 affects MongoDB Server: 4.0 prior to 4.0.5; 3.6 prior to 3.6.10; 3.4 prior to 3.4.19. Description: authenticated user can trigger a denial-of-service by sending specially crafted queries, causing an endless loop in mathematics processing while holding locks. Impact: availability de...

Buffer overflow

A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and...

CVE-2018-20802

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries with compound indexes affecting QueryPlanner. This issue affects MongoDB Server v3.6 versions prior to 3.6.9 and MongoDB Server v4.0 versions prior to 4.0.3...

CVE-2019-2393

CVE-2019-2393 affects MongoDB Server: v4.2 < 4.2.1, v4.0 < 4.0.13, and v3.6

CVE-2019-20924

CVE-2019-20924 is a denial-of-service vulnerability in MongoDB Server where a user authorized to run queries can trigger an invariant in the IndexBoundsBuilder by submitting specially crafted queries. Affected: MongoDB Server v4.2 before 4.2.2. The connected documents confirm the issue is a DoS r...

CVE-2018-20805

CVE-2018-20805 affects MongoDB Server; denial-of-service can be triggered by specially crafted queries using $elemMatch. Impacted are MongoDB Server v4.0 < 4.0.5 and v3.6

CVE-2018-20805 Invariant with $elemMatch

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10...

CVE-2018-20802

CVE-2018-20802 affects MongoDB Server: v3.6 versions before 3.6.9 and v4.0 versions before 4.0.3. A user authorized to perform database queries can trigger a denial of service by issuing specially crafted queries with compound indexes that affect the QueryPlanner. The available documents confirm ...

CVE-2020-7926

CVE-2020-7926 affects MongoDB Server 4.4.x prior to 4.4.1. A user authorized to perform database queries can cause a denial of service by issuing a specially crafted query that violates an invariant in the server selection subsystem. Impact is a partial availability loss (DoS) as described in CVS...

GaussDB Kernel: PUBLIC Role Should Not Have Permissions on All Objects

All users are attached to the PUBLIC role. Therefore, this role should have the fewest permissions for database security purposes. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...