Lucene search
K

2885 matches found

CNVD
CNVD
added 2020/04/15 12:0 a.m.1 views

Oracle Database Server Unauthorized Access Vulnerability

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

8CVSS8.2AI score0.01125EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/15 12:0 a.m.3 views

Oracle Database Server Unauthorized Access Vulnerability (CNVD-2020-28004)

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. A security vulnerability exists in the APEX component of Oracle Database Server prior to version 19.2. An attacker could exploit this vulnerability to unauthorized update, insert, or delet...

4.9CVSS8.3AI score0.00749EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/04/15 12:0 a.m.355 views

Oracle Database Server Multiple Vulnerabilities (Apr 2020 CPU)

The remote Oracle Database Server is missing the April 2020 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities: - Vulnerability in the Oracle Multimedia component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Easily exploitable...

8CVSS6.3AI score0.2258EPSS
Exploits2References9
Veracode
Veracode
added 2020/04/10 12:58 a.m.18 views

Arbitrary Code Execution

postgresql is vulnerable to arbitrary code execution. A stack-based buffer overflow flaw was found in the way PostgreSQL processed certain tokens from an SQL query when the intarray module was enabled on a particular database. An authenticated database user running a specially-crafted SQL query...

6.5CVSS4.2AI score0.04621EPSS
Exploits0References32Affected Software2
Veracode
Veracode
added 2020/04/10 12:48 a.m.34 views

Access Restriction Bypass

PostgreSQL is vulnerable to Access Restriction Bypass. Due to a flaw found in the way PostgreSQL enforced permission checks on scripts written in PL/Perl. If the PL/Perl procedural language was registered on a particular database, an authenticated database user running a specially-crafted PL/Perl...

8.5CVSS1.5AI score0.04081EPSS
Exploits1References40Affected Software2
Veracode
Veracode
added 2020/04/10 12:48 a.m.35 views

Remote Code Execution (RCE)

PostgreSQL is vulnerable to remote code execution RCE. Due to a flaw found in the way PostgreSQL enforced permission checks on scripts written in PL/Tcl, if the PL/Tcl procedural language was registered on a particular database, an authenticated database user running a specially-crafted PL/Tcl...

6CVSS2.4AI score0.02912EPSS
Exploits1References38Affected Software2
Veracode
Veracode
added 2020/04/10 12:48 a.m.21 views

Denial Of Service (DoS)

PostgreSQL is vulnerable to denial of service DoS.It is due to an integer overflow in src/backend/executor/nodeHash.c, allowing an attacker to use a malicious SQL query to cause a temporary denial of service postgres daemon crash or, potentially, execute arbitrary code with the privileges of the...

3.5CVSS5.3AI score0.06846EPSS
Exploits2References22Affected Software1
Veracode
Veracode
added 2020/04/10 12:48 a.m.19 views

Denial Of Service (DoS)

PostgreSQL is vulnerable to Denial Of Service DoS. A buffer overflow flaw was found in the way PostgreSQL retrieved a substring from the bit string for BIT and BIT VARYING SQL data types. An authenticated database user running a specially-crafted SQL query could use this flaw to cause a temporary...

6.5CVSS4AI score0.13255EPSS
Exploits2References30Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:0 a.m.2 views

The vulnerabilities of the RSA BSAFE Micro Edition Suite, Oracle Security Service, Oracle Database Server, Oracle Communications IP Service Activator, and Enterprise Manager Ops Center software-related to cryptographic key management failures allow attackers to trigger service failures.

The vulnerabilities of the RSA BSAFE Micro Edition Suite, Oracle Security Service, Oracle Database Server, the network software Oracle Communications IP Service Activator, and the virtualization management system Enterprise Manager Ops Center are related to errors in managing cryptographic keys...

7.8CVSS7.5AI score0.0265EPSS
Exploits0References4Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.3 views

The vulnerability of the Microsoft SQL Server relational database management system, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the Microsoft SQL Server relational database management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.5CVSS7.9AI score0.99046EPSS
Exploits14References5
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.3 views

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain full control over the application.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application by using network protocols...

7.5CVSS7.2AI score0.01256EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.2 views

The vulnerability of the Database Gateway for ODBC component in the Oracle Database Server database management system allows a hacker to cause a service failure.

The vulnerability of the Oracle Database Server ODBC driver database server’s firewall is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the OracleNet network protocol...

5.9CVSS6.5AI score0.01466EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.2 views

The vulnerability of the Database Gateway for ODBC component of the Oracle Database Server allows a hacker to gain full control over the application.

The vulnerability of the Oracle Database Server ODBC driver’s database server lies in its lack of access control mechanisms. Exploiting this vulnerability allows an attacker to gain full control over the application through the OracleNet network protocol...

6CVSS6.1AI score0.00792EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.4 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data using the OracleNet network...

3.5CVSS5.8AI score0.00784EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.4 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the OracleNet...

4.1CVSS5.8AI score0.00982EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.2 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to cause a service failure.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to completely disrupt service delivery using the OracleNet network protocol...

7.7CVSS7.2AI score0.01318EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.3 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to cause a service failure.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the OracleNet network protocol...

7.7CVSS7.2AI score0.02121EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/06 12:0 a.m.2 views

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL Database Management System allows a hacker to trigger a service failure.

The vulnerability of the MySQL Server component relates to errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.3AI score0.01855EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/02/06 12:0 a.m.2 views

The vulnerability of the Server component: the Audit Plugin of the Oracle MySQL Server database management system, which allows attackers to gain access to modify, add, or delete data.

The vulnerability of the Server component of the Oracle MySQL Server database management system’s Audit Plugin is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using the MyS...

4CVSS6.2AI score0.01305EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/02/06 12:0 a.m.3 views

The vulnerability of the Oracle Application component, DBA of the Oracle Database Server system, allows a hacker to gain access to modify, add, delete data, or cause service failures.

The vulnerability of the Oracle Application component, specifically the DBA component of the Oracle Database Server system, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or cause service interruptions...

3.9CVSS6.2AI score0.00717EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder