Lucene search
K

2885 matches found

Symantec
Symantec
added 2019/10/15 12:0 a.m.56 views

Oracle Database Server CVE-2019-2940 Local Security Vulnerability

Description Oracle Database Server is prone to a local security vulnerability. The vulnerability can be exploited over the 'OracleNet' protocol. The 'Core RDBMS' component is affected. This vulnerability affects the following supported versions: 12.1.0.2, 12.2.0.1 and 18c Technologies Affected...

2.2AI score0.00387EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2019/10/15 12:0 a.m.12 views

PT-2019-3684 · Mysql Server +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.17 and prior Description: The issue is related to errors in resource release in the MySQL Server product, specifically in the Server: Optimizer component. It allows an attacker with network access via multiple...

9.8CVSS6.5AI score0.49739EPSS
Exploits2References678
Symantec
Symantec
added 2019/10/11 12:0 a.m.194 views

Oracle October 2019 Critical Patch Update Multiple Vulnerabilities

Description Oracle has released an advance notification regarding the October 2019 Critical Patch Update CPU to be released on October 15, 2019. The update addresses 240 vulnerabilities affecting the following software: Oracle Database Server, versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c Oracl...

1.1AI score
Exploits0References1Affected Software79
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.4 views

The vulnerability of the InnoDB component in the MySQL Server database management system allows a attacker to cause service interruptions.

The vulnerability of the InnoDB component in the MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS5.4AI score0.0309EPSS
Exploits0References8Affected Software8
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.1 views

Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The DDL system for managing MySQL databases involves deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS5.5AI score0.03212EPSS
Exploits0References11Affected Software13
BDU FSTEC
BDU FSTEC
added 2019/09/05 12:0 a.m.3 views

The vulnerability of the Java VM component of the Oracle Database Server database management system allows a hacker to gain full control over the DBMS.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the DBMS...

7.5CVSS5.5AI score0.0123EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/09/05 12:0 a.m.3 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain full control over the DBMS.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the DBMS...

9.1CVSS5.5AI score0.01713EPSS
Exploits0References2Affected Software1
Cent OS
Cent OS
added 2019/08/30 3:38 a.m.567 views

mariadb security update

CentOS Errata and Security Advisory CESA-2019:2327 An update for mariadb is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.1CVSS6.7AI score0.04207EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2019/08/15 5:47 p.m.0 views

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

4.9CVSS7.3AI score0.0256EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2019/08/15 5:47 p.m.4 views

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

6.5CVSS7.2AI score0.02099EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2019/08/14 7:0 a.m.6 views

mysql: Server: DDL unspecified vulnerability (CPU Apr 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS7.3AI score0.02078EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2019/08/02 12:0 a.m.3 views

The vulnerability of the Agent Handler component of the console for managing McAfee ePolicy Orchestrator integrated enterprise security solutions allows a perpetrator to disclose protected information.

The vulnerability of the Agent Handler component of the McAfee ePolicy Orchestrator console for managing enterprise security integrated solutions is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...

7.7CVSS5.5AI score0.01119EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:0 a.m.4 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data using the Oracle Net protocol stack...

7.6CVSS7.8AI score0.01111EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:0 a.m.4 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows attackers to disclose sensitive information.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

4CVSS7.7AI score0.00413EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:0 a.m.3 views

The vulnerabilities of the RSA BSAFE Micro Edition Suite and BSAFE Crypto-C Micro Edition security tools, as well as the Oracle Database Server database management system and the Oracle Fusion Middleware software platform, are caused by an operation that goes beyond the buffer boundaries in memory. This allows a malicious actor to execute arbitrary code in the context of the current user.

The vulnerabilities of the RSA BSAFE Micro Edition Suite and BSAFE Crypto-C Micro Edition security tools, as well as the Oracle Database Server database management system and the Oracle Fusion Middleware software platform, are due to the execution of operations outside of the buffer in memory...

10CVSS8.7AI score0.04012EPSS
Exploits0References6Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:0 a.m.3 views

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to modify, add, or delete data, or to cause service failures.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data, or cause service interruptions...

7.1CVSS7.8AI score0.01089EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:0 a.m.2 views

The vulnerability of the Oracle Text component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Oracle Text component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures using the Oracle Net protocol stack...

6.4CVSS7.8AI score0.00887EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2019/07/23 11:15 p.m.21 views

CVE-2019-2776

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Index privilege with network access via OracleNet to compromise Core...

7.6CVSS6.4AI score0.01111EPSS
Exploits0References1
OSV
OSV
added 2019/07/23 11:15 p.m.4 views

CVE-2019-2749

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multipl...

6.8CVSS6.8AI score0.01089EPSS
Exploits0References1
NVD
NVD
added 2019/07/23 11:15 p.m.34 views

CVE-2019-2749

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multipl...

6.8CVSS5.9AI score0.01089EPSS
Exploits0References1
Rows per page
Query Builder