Lucene search
+L

221 matches found

BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.8 views

The vulnerability of the OLE DB driver for SQL Server, related to buffer overflows in the stack, allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.5AI score0.01611EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:33 a.m.9 views

SUSE CVE-2013-7491

An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated...

7.8CVSS7.1AI score0.02656EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:33 a.m.5 views

SUSE CVE-2013-7490

An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption...

7CVSS7AI score0.02738EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:23 a.m.5 views

SUSE CVE-2014-10402

An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. NOTE: this issue exists because of an incomplete fix for CVE-2014-10401...

5.5CVSS7AI score0.00488EPSS
SaveExploits1References8
SUSE CVE
SUSE CVE
added 2023/02/15 3:57 a.m.7 views

SUSE CVE-2020-14393

A buffer overflow was found in perl-DBI 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data...

8.4CVSS7AI score0.00602EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:0 a.m.13 views

The vulnerability of the DBI interface module of the Perl database library allows attackers to access confidential data and also cause service interruptions.

The vulnerability of the DBI interface module in Perl DBI is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

6.2CVSS6.7AI score0.00488EPSS
SaveExploits1References11Affected Software4
Github Security Blog
Github Security Blog
added 2022/05/14 2:5 a.m.21 views

phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database name or 2 table name, related to the...

3.5CVSS6.3AI score0.01519EPSS
SaveExploits1References7Affected Software1
OpenVAS
OpenVAS
added 2022/04/21 12:0 a.m.15 views

Fedora: Security Advisory for pdns (FEDORA-2022-8367cefdea)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.05026EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/11/03 12:0 a.m.76 views

Unspecified Vulnerability in Fortinet FortiPortal

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi and FortiAP product lines, available as a virtual machine for MSPs. A security vulnerability in the customer database interface of Fortinet FortiPortal prior ...

3.5CVSS6.8AI score0.00436EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/02 6:15 p.m.38 views

CVE-2021-36181

A concurrent execution using shared resource with improper Synchronization vulnerability 'Race Condition' in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific...

3.5CVSS0.00436EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/02 6:15 p.m.23 views

Race condition

A concurrent execution using shared resource with improper Synchronization vulnerability 'Race Condition' in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific...

3.5CVSS4.3AI score0.00436EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/02 6:15 p.m.4 views

CVE-2021-36181

A concurrent execution using shared resource with improper Synchronization vulnerability 'Race Condition' in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific...

3.5CVSS6.1AI score0.00436EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/11/02 5:22 p.m.56 views

CVE-2021-36181

Fortinet FortiPortal CVE-2021-36181 is a race-condition in the customer database interface caused by improper thread synchronization. It affects FortiPortal prior to 6.0.6 and can allow an authenticated, low-privilege user to coordinate web requests to bring the underlying database data into an i...

3.5CVSS4.2AI score0.00436EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/11/02 5:22 p.m.14 views

CVE-2021-36181

A concurrent execution using shared resource with improper Synchronization vulnerability 'Race Condition' in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific...

3.1CVSS6.9AI score0.00436EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.21 views

The vulnerability of the DBI programming language module in Perl, related to an unvalidated return value, allows attackers to trigger a service failure.

The vulnerability of the DBI programming language module in Perl is related to an unvalidated return value in the hvFetch function when checking for the presence of NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...

4.7CVSS6.1AI score0.00505EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.16 views

The vulnerability of the DBI interpreter component in the Perl programming language, related to writing beyond buffer boundaries, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the DBI interpreter for the Perl programming language is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

7.1CVSS7.3AI score0.00602EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.14 views

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence system, a business automation solution from Oracle E-Business Suite, allows a malicious individual to gain unauthorized access to the device and disclose protected information.

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence system, a business automation solution from Oracle E-Business Suite, is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the...

8.5CVSS6.7AI score0.01015EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/01/14 12:0 a.m.5 views

SAP Business Information Warehouse SQL Injection Vulnerability

SAP Business Information Warehouse SAP BW is a data warehouse for collecting and tabulating information in an enterprise environment from SAP Germany. The software is an enterprise-wide information center for data analysis from R / 3 and other business applications, including databases and extern...

6.5CVSS7.7AI score0.01895EPSS
SaveExploits2References1
OSV
OSV
added 2021/01/12 3:15 p.m.5 views

CVE-2021-21468

The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the user to practically read out any database table...

6.5CVSS5.8AI score0.01895EPSS
SaveExploits2References4
NVD
NVD
added 2021/01/12 3:15 p.m.40 views

CVE-2021-21468

The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the user to practically read out any database table...

6.5CVSS6.6AI score0.01895EPSS
SaveExploits2References4
Rows per page
Query Builder