CVE-2021-35558: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise Core RDBMS...

CVE-2021-35557: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise Core RDBMS...

CVE-2021-35551: Undefined Security Weakness

Vulnerability in the RDBMS Security component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise RDBMS Security. Successfu...

CVE-2021-2332: Undefined Security Weakness

Vulnerability in the Oracle LogMiner component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise Oracle LogMiner...

PT-2021-21003

Name of the Vulnerable Software and Affected Versions: Oracle Database Server version 21c Description: The issue affects the Zero Downtime DB Migration to Cloud component, allowing a high-privileged attacker with local logon privilege to compromise it. Successful attacks can result in the takeove...

PT-2021-20968

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.2.0.1, 19c, and 21c Description: The issue affects the RDBMS Security component, allowing a high-privileged attacker with DBA privilege and network access via Oracle Net to compromise RDBMS Security...

PT-2021-20973

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.1.0.2, 12.2.0.1, 19c, 21c Description: The issue affects the Core RDBMS component, allowing a low-privileged attacker with Create Table privilege and network access via Oracle Net to compromise Core RDBMS...

PT-2021-20972

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.1.0.2, 12.2.0.1, 19c, 21c Description: The issue affects the Core RDBMS component, allowing a low-privileged attacker with Create Table privilege and network access via Oracle Net to compromise Core RDBMS...

PT-2021-21017

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.1.0.2, 12.2.0.1, 19c, and 21c Description: The issue affects the Java VM component, allowing a low-privileged attacker with Create Procedure privilege and network access via Oracle Net to compromise the Java...

PT-2021-15434

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1 and 19c Description The issue affects the Oracle LogMiner component, allowing a high-privileged attacker with DBA privilege and network access via Oracle Net to compromise Oracle LogMiner. Thi...

Oracle Database Server input validation error vulnerability

Oracle Database Server is a relational database management system from Oracle Corporation USA. An unspecified vulnerability exists in the Oracle Database Enterprise Edition Unified Audit component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An attacker could use this...

Oracle Database Server input validation error vulnerability

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing, etc. A denial of service vulnerability exists in the Core RDBMS component of Oracle Database Server versions 12.1.0.2,...

Oracle Database Server input validation error vulnerability

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing and other functions.The RDBMS Security component of Oracle Database Server versions 12.2.0.1, 19c, and 21c has an...

Oracle Database Server input validation error vulnerability

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing, and other functions.An unspecified vulnerability exists in the Java VM component of Oracle Database Server versions...

Oracle Database Server input validation error vulnerability

Oracle Database Server is a relational database management system from Oracle Corporation. The Zero Downtime DB Migration to Cloud component of Oracle Database Server version 21c is vulnerable to an input validation error that could be exploited to cause an attacker to take over Zero Downtime DB...

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

mysql: Server: GIS unspecified vulnerability (CPU Jul 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: GIS. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2021-21704

CVE-2021-21704 involves PHP’s Firebird PDO driver extension. When using affected PHP versions, a malicious server can cause crashes in database functions (e.g., getAttribute(), execute(), fetch()) by returning invalid response data not parsed correctly by the driver, leading to crashes, denial of...

REINER SCT Reiner TimeCard Trust Management Vulnerability

REINER SCT Reiner TimeCard is a chip card reading device from REINER SCT, Germany, used for access protection in secure online banking devices, terminals for dealers and merchants using girocard payments, and PC workstations. A security vulnerability exists in REINER SCT Reiner TimeCard version...