PT-2021-21003

Name of the Vulnerable Software and Affected Versions: Oracle Database Server version 21c Description: The issue affects the Zero Downtime DB Migration to Cloud component, allowing a high-privileged attacker with local logon privilege to compromise it. Successful attacks can result in the takeove...

CVE-2021-35599: Undefined Security Weakness

Vulnerability in the Zero Downtime DB Migration to Cloud component of Oracle Database Server. The supported version that is affected is 21c. Easily exploitable vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where Zero Downtime DB...

PT-2021-4711 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.26 and prior Description: The issue is related to insufficient input validation in the MySQL Server component, specifically the Data Dictionary. This can be exploited by a high-privileged attacker with logon to the...

mysql: Server: DML unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server...

PT-2021-16156 · Oracle · Linux-Oracle

Name of the Vulnerable Software and Affected Versions: Oracle Linux versions 7 through 8 Description: A vulnerability in the OSwatcher component of Oracle Linux allows a low-privileged attacker with logon to the infrastructure to compromise Oracle Linux. Successful attacks can result in the...

CVE-2021-40174

Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings...

CVE-2021-40174

Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings...

CVE-2021-40178

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGOPATH key value in the logon settings...

CVE-2021-40178

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGOPATH key value in the logon settings...

Cross site request forgery (csrf)

Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings...

CVE-2021-40174

Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings...

CVE-2021-40178

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGOPATH key value in the logon settings...

CVE-2021-40174

Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings...

CVE-2021-40178

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGOPATH key value in the logon settings...

PT-2021-22832

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5224 Description The issue allows a CSRF attack for disabling the logon security settings. Recommendations For versions prior to Build 5224, update to Build 5224 or later to resolve the issue. A...

PT-2021-22836

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5224 Description The issue allows stored XSS via the LOGO PATH key value in the logon settings. This can potentially lead to malicious script execution when a user accesses the affected logon...

CVE-2021-40174: Cross-Site Request Forgery (CSRF)

Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings...

CVE-2021-40178: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGOPATH key value in the logon settings...

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138 prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Data Store. CVSS 3.0 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).

...

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

...