Lucene search
+L

3819 matches found

CNVD
CNVD
•added 2025/01/24 12:00 a.m.•29 views

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-02311)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL's MySQL Server. An attacker can exploit this vulnerability to cause MySQL Server to hang or crash...

7.5CVSS6AI score0.01121EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/23 4:15 p.m.•27 views

CVE-2024-55971

SQL Injection vulnerability in the default configuration of the Logitime WebClock application = 5.43.0 allows an unauthenticated user to run arbitrary code on the backend database server...

10CVSS0.00656EPSS
SaveExploits0References4
Qualys Blog
Qualys Blog
•added 2025/01/23 5:17 a.m.•74 views

Oracle Critical Patch Update, January 2025 Security Update Review

Oracle released its first quarterly edition of this year’s Critical Patch Update, which received patches for 318 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, includin...

9.5CVSS7.2AI score0.99957EPSS
SaveExploits61
Cvelist
Cvelist
•added 2025/01/23 12:00 a.m.•29 views

CVE-2024-55971

SQL Injection vulnerability in the default configuration of the Logitime WebClock application = 5.43.0 allows an unauthenticated user to run arbitrary code on the backend database server...

0.00656EPSS
SaveExploits0References4
CVE
CVE
•added 2025/01/23 12:00 a.m.•64 views

CVE-2024-55971

The Logitime WebClock time and attendance management tool (versions

10CVSS8.4AI score0.00656EPSS
SaveExploits0References4
OSV
OSV
•added 2025/01/21 9:15 p.m.•14 views

UBUNTU-CVE-2025-21519

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...

4.4CVSS7.2AI score0.00866EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•19 views

PT-2025-4275 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.25 Oracle Database Server versions 21.3 through 21.16 Oracle Database Server versions 23.4 through 23.6 Description: The issue is related to the Java VM component of Oracle Database Server, wher...

4.2CVSS7.4AI score0.00246EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/21 12:00 a.m.•5 views

CVE-2025-21553: Incorrect Authorization

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.25, 21.3-21.16 and 23.4-23.6. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net t...

4.2CVSS5.7AI score0.00246EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/21 12:00 a.m.•20 views

Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Oracle Database Server. An attacker could exploit the...

4.2CVSS8.7AI score0.00246EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/22 12:00 a.m.•12 views

PHP 安全漏洞

PHP is a scripting language for PHP that executes on the server side. A security vulnerability exists in PHP that originates in the MySQL server that may cause clients to disclose the contents of their heaps. The following versions are affected: versions 8.1. through 8.1.31, 8.2. through 8.2.26,...

5.8CVSS5.5AI score0.02238EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•15 views

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.4AI score0.01375EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•16 views

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.4AI score0.01375EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•17 views

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS6.4AI score0.01375EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•17 views

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.4AI score0.01613EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•15 views

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.4AI score0.01375EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•28 views

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.4AI score0.01613EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/11/17 12:00 a.m.•23 views

The vulnerability of the Microsoft SQL Server database management system, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft SQL Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6AI score0.00769EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/11/15 12:00 a.m.•17 views

Vulnerability of the Cluster component: General database management systems like MySQL Cluster and their components; FTS database management system like Oracle MySQL Server, which allows attackers to cause service interruptions.

Vulnerability of the Cluster component: General database management systems like MySQL Cluster and their components like the Server component: The Oracle MySQL Server component exists due to incorrect validation of input data in these components. Exploiting this vulnerability can allow an attacke...

6.8CVSS5.8AI score0.00895EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/11/15 12:00 a.m.•19 views

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of the Native Client component in the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.4AI score0.01613EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/11/15 12:00 a.m.•18 views

The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.

The vulnerability of Native Client components in Microsoft SQL Server database management systems relates to the use of memory after it is released. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6.1AI score0.01613EPSS
SaveExploits0References2
Rows per page
Query Builder