Lucene search
K

2885 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2021/04/07 10:6 a.m.30 views

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Supplier Lifecycle Mgmt

Summary Multiple Oracle database server security vulnerabilities affect IBM Emptoris Supplier Lifecycle Management. Vulnerability Details CVEID: CVE-2021-2045 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Text component could allow an authenticated attacker to...

8.8CVSS6.3AI score0.01673EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/07 10:4 a.m.37 views

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Program Management

Summary Multiple Oracle Database server security vulnerabilities affect IBM IBM Emptoris Program Management. Vulnerability Details CVEID: CVE-2021-2045 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Text component could allow an authenticated attacker to cause ...

8.8CVSS6.3AI score0.01673EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/07 10:2 a.m.30 views

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform

Summary Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform Vulnerability Details CVEID: CVE-2021-2045 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Text component could allow an authenticated...

8.8CVSS6.4AI score0.01673EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/04/07 10:1 a.m.43 views

Security Bulletin: Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Contract Management

Summary Multiple Oracle database server security vulnerabilities affect IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2021-2045 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Text component could allow an authenticated attacker to cause a...

8.8CVSS6.3AI score0.01673EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2021/03/30 12:0 a.m.13 views

Apache Druid 安全漏洞

Apache Druid is a column-oriented, open source distributed database written in Java from the Apache Software Apache Foundation. A security vulnerability exists in Apache Druid 0.20.2, which can be exploited by an attacker to execute arbitrary code in the MYSQL process of the Druid server...

8.8CVSS8.3AI score0.34949EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2021/03/02 12:0 a.m.2 views

PT-2021-5455 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.1.0.2, 12.2.0.1 and 19c Description: The issue is related to the Advanced Networking Option component of Oracle Database Server, allowing an unauthenticated attacker with network access via Oracle Net to...

8.3CVSS8.8AI score0.025EPSS
Exploits5References24
CNNVD
CNNVD
added 2021/03/01 12:0 a.m.3 views

MongoDB 安全漏洞

Mongodb Server is the United States Mongodb company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A denial of service vulnerability exists in MongoDB Server, which originates...

6.5CVSS5.8AI score0.01289EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:0 a.m.2 views

The vulnerability of the Advanced Networking Option component of the Oracle Database Server system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Advanced Networking Option component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected...

8.3CVSS7.7AI score0.01441EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:0 a.m.2 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS6.5AI score0.02175EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:0 a.m.3 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS6.5AI score0.02116EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:0 a.m.1 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

6.8CVSS6.3AI score0.02224EPSS
Exploits0References3Affected Software2
CNVD
CNVD
added 2021/02/05 12:0 a.m.6 views

Trend Micro OfficeScan XG and Trend Micro Apex One Access Control Error Vulnerabilities (CNVD-2021-28307)

Trend Micro OfficeScan XG and Trend Micro Apex One are both products of Trend Micro, Inc. Trend Micro OfficeScan XG is a distributed anti-virus software suite, and Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response capabilities. Tre...

5.3CVSS6.4AI score0.02083EPSS
Exploits0References1
OSV
OSV
added 2021/02/04 8:15 p.m.4 views

CVE-2021-25229

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server...

5.3CVSS6.1AI score0.02083EPSS
Exploits0References3
NVD
NVD
added 2021/02/04 8:15 p.m.9 views

CVE-2021-25229

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server...

5.3CVSS0.02083EPSS
Exploits0References3
Prion
Prion
added 2021/02/04 8:15 p.m.18 views

Improper access control

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server...

5CVSS5.1AI score0.02083EPSS
Exploits0References3Affected Software2
Cvelist
Cvelist
added 2021/02/04 7:36 p.m.10 views

CVE-2021-25229

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server...

5.5AI score0.02083EPSS
Exploits0References3
CVE
CVE
added 2021/02/04 7:36 p.m.65 views

CVE-2021-25229

CVE-2021-25229 concerns an improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 that could allow an unauthenticated user to obtain information about the database server. The core issue is access control failure in the product’s components, enablin...

5.3CVSS5.1AI score0.02083EPSS
Exploits0References3Affected Software2
OSV
OSV
added 2021/02/03 5:15 p.m.3 views

CVE-2021-25275

SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login...

7.8CVSS7.3AI score0.00593EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.1 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.8CVSS6.5AI score0.02175EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.2 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.8CVSS6.5AI score0.02116EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder