PT-2021-7112

Name of the Vulnerable Software and Affected Versions Oracle Application Express Data Reporter versions prior to 21.1.0.00.04 Description The issue is related to insufficient input validation in the Oracle Application Express Data Reporter component of Oracle Database Server. This easily...

Oracle Database Server Authorization Vulnerability

Oracle Database Server is a relational database management system from Oracle Corporation USA. A security vulnerability exists in the Advanced Networking Option component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c, which could be exploited to cause an attacker to take over...

Oracle Database Server input validation error vulnerability

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management. a security vulnerability exists in the Oracle XML DB component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An...

PT-2021-7190

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.2.0.1 through 19c Description The issue is related to insufficient input validation in the Database Vault component of Oracle Database Server. This allows a high-privileged attacker with DBA privilege and...

PT-2021-7151

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1 and 19c Description The issue exists due to insufficient input validation in the Oracle Text component of Oracle Database Server. This allows a remote attacker to execute arbitrary code using...

PT-2021-7152

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2 through 19c Description The issue is related to insufficient input validation in the Oracle XML DB component, allowing a high-privileged attacker with Alter User privilege and network access via Oracle...

Oracle Database Server input validation error vulnerability

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management.Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c contain a security vulnerability in the Oracle Database - Enterprise...

PT-2021-7122

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2 through 19c Description The issue is related to insufficient input validation in the Java VM component of Oracle Database Server. This allows a low-privileged attacker with Create Procedure privilege an...

Oracle Database Server input validation error vulnerability

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing, etc. A denial of service vulnerability exists in the Core RDBMS component of Oracle Database Server version 19c, which ca...

Oracle Database Server input validation error vulnerability

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Database Vault component of Oracle Database Server version 12.2.0.1, 19c. An attacker could...

Oracle Database Server input validation error vulnerability

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Java VM component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An attacker...

Oracle Database Server input validation error vulnerability

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management. a security vulnerability exists in the Oracle XML DB component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An...

Oracle Database Server input validation error vulnerability

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management. an unspecified vulnerability exists in the Oracle Text component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. A...

CVE-2021-21704

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute, execute, fetch and others by returning invalid response data that is not...

CVE-2021-32722: Uncontrolled Resource Consumption

GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an uncontrolled resource consumption vulnerability. A large amount of page moves within a short space of time could overwhelm Database servers due to improper handling of load...

Exploit for CVE-2021-2173

CVE-2021-2173 CVE-2021-2173 PoC is explained here: ht...

Oracle MySQL Server Group Replication Plugin DoS

The vulnerability of the Server: Group Replication Plugin component of the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server database management system’s stored procedures is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

Important: Red Hat Security Advisory: rh-mariadb103-mariadb and rh-mariadb103-galera security update

An update for rh-mariadb103-mariadb and rh-mariadb103-galera is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

[SECURITY] Fedora 34 Update: mariadb-10.5.10-1.fc34

MariaDB is a community developed fork from MySQL - a multi-user, multi-thre aded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...