CVE-2019-11212 TIBCO MDM Exposes Cross-Site Scripting Vulnerabilities

The MDM server component of TIBCO Software Inc's TIBCO MDM contains multiple vulnerabilities that theoretically allow an authenticated user with specific roles to perform cross-site scripting XSS attacks. This issue affects TIBCO Software Inc.'s TIBCO MDM version 9.0.1 and prior versions; version...

MySQL Server Unauthorized Access

Vulnerability of the Server sub-component: Compiling the MySQL Server component of the Oracle MySQL database management system is associated with improper access control. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected...

CVE-2019-11210

The server component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, and TIBCO Spotfire Analytics Platform for AWS Marketplace contains a vulnerability that theoretically allows an unauthenticated user to bypass access controls and remotely execute code using the operati...

NewStart CGSL CORE 5.04 / MAIN 5.04 : mariadb Multiple Vulnerabilities (NS-SA-2019-0034)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has mariadb packages installed that are affected by multiple vulnerabilities: - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client mysqldump. Supported versions that are affected are 5.5.56 and...

CVE-2019-2795

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2019-2752

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Options. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Code injection

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2019-2780

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Components / Services. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...

CVE-2019-2812

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2019-2834

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2019-2791

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

CVE-2019-2739

Disclaimer: This data contains information about vulnerable...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26665)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the MySQL Server component of Oracle MySQL, version 5.7.26 and earlier, and the Server:...

Oracle MySQL Server Component Input Validation Error Vulnerability (CNVD-2019-26672)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component input validation error vulnerability exists in the Server: Optimizer subcomponent of the MySQL Server component in Oracle MySQL, version...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26685)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An access control error vulnerability in the Server: FTS subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.16 and earlier. An...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26687)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. The MySQL Server component in Oracle MySQL, version 5.7.26 and earlier and the Server: Optimizer subcomponent of Oracle MySQL, version 8.0.16 and...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26532)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An Access Control Error vulnerability in the Server: Optimizer subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.16 and earlier...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26684)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server : Pluggable Auth subcomponent of the MySQL Server component in Oracle MySQL, version 5.6.44 and earlier...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26688)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. The MySQL Server component in Oracle MySQL, version 5.7.26 and earlier and the Server: Optimizer subcomponent of Oracle MySQL, version 8.0.16 and...

Oracle Fusion Middleware HTTP Server Component Access Control Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection and other functions. HTTP Server is one of the HTTP server component. A security vulnerability exist...