Lucene search
K

2885 matches found

Positive Technologies
Positive Technologies
added 2020/01/14 12:0 a.m.3 views

PT-2020-1539 · Oracle · Oracle Database Server +1

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c Description: The issue is related to a vulnerability in the Database Gateway for ODBC component, which can be exploited by a low-privileged attacker with Create Sessio...

6CVSS5.6AI score0.00792EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2020/01/14 12:0 a.m.3 views

PT-2020-1538 · Oracle · Oracle Database Server +1

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.1.0.2, 12.2.0.1, 18c, and 19c Description: The issue is related to a vulnerability in the Core RDBMS component of Oracle Database Server, allowing a high-privileged attacker with Create Materialized View and...

3.5CVSS4.5AI score0.00784EPSS
Exploits0References6
Symantec
Symantec
added 2020/01/10 12:0 a.m.87 views

Oracle January 2020 Critical Patch Update Multiple Vulnerabilities

Description Oracle has released advance notification regarding the January 2020 Critical Patch Update CPU to be released on January 14, 2020. The update addresses 333 vulnerabilities affecting the following software: Oracle Database Server, versions 12.2.0.1, 18c, 19c Oracle Communications Design...

1.2AI score
Exploits0References1Affected Software88
Tenable Nessus
Tenable Nessus
added 2019/11/26 12:0 a.m.51 views

MariaDB 10.1.0 < 10.1.42 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.42. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.42 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Parser. Supported versions that are affected are...

7.2CVSS6.8AI score0.03829EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.4 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data using the Oracle Net protoc...

5CVSS6.8AI score0.0098EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2019/11/18 12:32 p.m.0 views

USN-4195-1 mysql-5.7, mysql-8.0 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.18 in Ubuntu 19.10. Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 19.04 have been updated to MySQL 5.7.28. In addition to security fixes, the...

6.5CVSS6.5AI score0.03829EPSS
Exploits0References30
BDU FSTEC
BDU FSTEC
added 2019/11/18 12:0 a.m.2 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data using the Oracle Net protoc...

4.3CVSS6.7AI score0.00844EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2019/11/14 12:0 a.m.2 views

Login Bypass Vulnerability in LebiShop (Multi-Language Online Shopping Mall System)

Lebi multilingual online shopping mall system LebiShop, free , full open source , support for secondary development . NET 4.5 C language development , using SQL Server and MySQL database . LebiShop has a login bypass vulnerability that can be exploited by an attacker to log in to the backend of t...

7.4AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:0 a.m.1 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to read, modify, or delete data, or to cause a service failure.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, modify, add, or delete access to data, or cause service interruptions through...

3.9CVSS6.7AI score0.00396EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:0 a.m.1 views

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to read, modify, add, or delete data.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to read, modify, add, or delete data through various network protocols...

7.1CVSS7.2AI score0.01349EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:0 a.m.7 views

The vulnerability of the Core RDBMS component (jackson-databind) of the Oracle Database Server system allows a attacker to cause downtime or service failures.

The vulnerability of the Core RDBMS component jackson-databind of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause downtime or service failures through various network protocols...

6.3CVSS7AI score0.01117EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:0 a.m.2 views

Vulnerability of the MySQL Server component: This component of the database management system allows a hacker to cause system downtime or service failures.

The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause downtime or service failures using the MySQL network protocol...

6.8CVSS6.3AI score0.02768EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:0 a.m.2 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to disclose protected information.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

5CVSS6.8AI score0.01129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:0 a.m.3 views

The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component of the MySQL Database Management System is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures using the MySQL protocol...

6.8CVSS6.3AI score0.02626EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:0 a.m.2 views

The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component of the MySQL Database Management System is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures using the MySQL protocol...

6.8CVSS6.3AI score0.02626EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2019/10/30 12:0 a.m.1 views

OpenAFS Denial of Service Vulnerability (CNVD-2019-43378)

OpenAFS is a set of open source distributed file system , allowing systems to share files and resources through the local area and wide area network . A denial of service vulnerability exists in OpenAFS. An attacker could exploit this vulnerability by making a series of VOTEDebug RPC calls to cau...

7.5CVSS6.4AI score0.01399EPSS
Exploits0References1
Prion
Prion
added 2019/10/29 7:15 p.m.12 views

Design/Logic Flaw

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTEDebug RPC calls to crash a database server within the SVOTEDebug RPC handler...

5CVSS7.3AI score0.01399EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2019/10/29 7:15 p.m.16 views

CVE-2019-18601

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTEDebug RPC calls to crash a database server within the SVOTEDebug RPC handler...

7.5CVSS7.1AI score0.01399EPSS
Exploits0References3
Cvelist
Cvelist
added 2019/10/29 1:40 p.m.27 views

CVE-2019-18601

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTEDebug RPC calls to crash a database server within the SVOTEDebug RPC handler...

7.3AI score0.01399EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2019/10/29 1:40 p.m.23 views

CVE-2019-18601

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTEDebug RPC calls to crash a database server within the SVOTEDebug RPC handler...

7.5CVSS7.3AI score0.01399EPSS
Exploits0
Rows per page
Query Builder