CVE-2026-91615

A vulnerability exists in the Java VM component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with network access via SOCKS5 can exploit this difficulty-to-exploit flaw to compromise the Java VM. Successful exploitation may l...

CVE-2026-91568

A vulnerability exists in the RDBMS component of Oracle Database Server versions 23.4.0-23.26.3 . A low-privileged attacker with Create Session privileges and network access via Oracle Net can exploit this flaw to compromise the RDBMS. Successful exploitation may result in unauthorized access to ...

CVE-2026-91563

A vulnerability exists in the Oracle OLAP component of Oracle Database Server , specifically affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with DBMS_AW privileges and network access via Oracle Net can exploit this to compromise and potentially take ov...

CVE-2026-91503

A vulnerability exists in the VPD component of Oracle Database Server affecting versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A low-privileged attacker with Create Table privileges and network access via Oracle Net can exploit this flaw to compromise the VPD. Successful exploitation may...

CVE-2026-91499

The RDBMS component of Oracle Database Server (affected versions 23.4.0-23.26.3 ) is vulnerable to a high-severity security flaw. A low-privileged attacker possessing DBMS_VECTOR privileges and network access via Oracle Net can exploit this vulnerability to compromise the RDBMS, potentially leadi...

CVE-2026-91479

A vulnerability exists in the RDBMS component of Oracle Database Server (affected versions 23.4.0-23.26.3 ). An unauthenticated attacker with access to the physical communication segment attached to the hardware can exploit this flaw to compromise the RDBMS. Successful exploitation can lead to a ...

CVE-2026-73964

A vulnerability exists in the RDBMS component of Oracle Database Server (affected versions 19.3-19.32 and 21.3-21.23 ). A high-privileged attacker with Query Optimizer privileges and network access via Oracle Net can exploit this issue to compromise the RDBMS. Successful exploitation may lead to ...

CVE-2026-101512

A vulnerability exists in the RDBMS component of Oracle Database Server affecting versions 23.4.0-23.26.3 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the RDBMS. Successful exploitation may lead to unauthorized access to critical data or comp...

CVE-2026-101510

The Oracle Net Services component of Oracle Database Server is vulnerable in versions 19.3-19.32 , 21.3-21.23 , and 23.4.0-23.26.3 . A high-privileged attacker with local access can exploit this vulnerability to compromise Oracle Net Services, potentially resulting in a hang or a frequently repea...

CVE-2026-101434

The PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft, specifically the Database Server component in versions 8.61-8.63 , is vulnerable to a flaw that allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction fro...

TurboMeeting - Boolean-based SQL Injection

A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

analyze-Exploit-CVE-2023-22518-Confluence

Exploit-CVE-2023-22518 CVE-2023-22518 in Confluence CVE-2023-22518 : This vulnerability is described as an "improper authorization vulnerability in Confluence's database and server". The flaw affects On-premises versions of Atlassian products. SETUP Set up the environment. Use the vulnerable...

CVE-2015-4870

CVE-2015-4870 MySQL DoS in the Procedure Analyse Function – CVE-2015-4870 Write-up: https://osandamalith.wordpress.com/2016/05/29/mysql-dos-in-the-procedure-analyse-function-cve-2015-4870/ Video: https://www.youtube.com/watch?v=zE-TsQVn9oI...

[SECURITY] [DLA 4835-1] mariadb security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4835-1 [email protected] https://www.debian.org/lts/security/ Otto Kekäläinen October 14, 2026 https://wiki.debian.org/LTS -...

CVE-2026-100695 Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE

Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTIONID database result is interpolated into JavaScript without proper escaping, allowing a malicious database server to execute arbitrary JavaScript in the authenticated Adminer origin. In co-located deployments...

PT-2026-99366

Name of the Vulnerable Software and Affected Versions Adminer versions prior to 6.0.2 Description An issue exists where the result of the CONNECTION ID database function is interpolated into JavaScript without proper escaping. This allows a malicious database server to execute arbitrary JavaScrip...

Oracle Database Server (September 2026 CSPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and...

Oracle Database Server Unauthorized Access

The vulnerability of the RDBMS component of the database management system, Oracle Database Server, is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Java VM Oracle Database Server Compromise

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system using network protocols...