3854 matches found
OLE DB driver for SQL Server Code Execution
The vulnerability of the OLE DB driver for SQL Server on Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ODBC Driver SQL Server Code Execution
The vulnerability of the ODBC driver for SQL Server on Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the user is connected to the malicious SQL server via ODBC, and the malicious actor send...
CVE-2024-21066
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having Authenticated User privilege with logon to the infrastructure where RDBMS executes to...
CVE-2024-21058
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise Unified Audit...
CVE-2024-20995
Vulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise Oracle...
CVE-2024-21093
The CVE-2024-21093 entry concerns the Java VM component of Oracle Database Server. Affected are Oracle Database Server versions 19.3–19.22 and 21.3–21.13. The issue allows a low-privileged user with Create Session/Create Procedure and network access via Oracle Net to compromise the Java VM, with ...
CVE-2024-21066
CVE-2024-21066 affects Oracle Database Server RDBMS component. Affected versions are 19.3–19.22 and 21.3–21.13. The issue allows a high-privileged, authenticated user with logon access to compromise the RDBMS, with human interaction required. Exploitation is described as feasible by an authentica...
CVE-2024-21058
CVE-2024-21058 affects Oracle Database Server’s Unified Audit component. Affected: Oracle Database Server versions 19.3–19.22 and 21.3–21.13 . Root cause described as insufficient input validation in the Unified Audit path (per connected PT Security entry). A highly privileged attacker with SYSDB...
Oracle Database Server security vulnerabilities
Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Oracle Database Server's Unified Audit. An attacker exploiting th...
Oracle Database Server security vulnerabilities
Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Oracle Database Server's RDBMS. An attacker can exploit this...
PT-2024-3524 · Oracle · Oracle Database Server
Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.22 Oracle Database Server versions 21.3 through 21.13 Description: The issue is related to the RDBMS component of Oracle Database Server, allowing a high-privileged attacker with authenticated...
CVE-2024-21066: Improper Neutralization of Input During Web Page Generation
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having Authenticated User privilege with logon to the infrastructure where RDBMS executes to...
CVE-2024-21058: Undefined Security Weakness
Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise Unified Audit...
PT-2024-4879
Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.22 Oracle Database Server versions 21.3 through 21.13 Description: The issue is related to the Java VM component of Oracle Database Server and involves the disclosure of information. Exploitatio...
PT-2024-3527
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 19.3 through 19.22 Oracle Database Server versions 21.3 through 21.13 Description The issue is related to insufficient input validation in the Unified Audit component of Oracle Database Server. This can allow a...
CVE-2024-20995: Improper Resource Shutdown or Release
Vulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise Oracle...
Oracle Database Server security vulnerabilities
Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability exists in the Java VM of Oracle Database Server. An attacker can exploit...
CVE-2024-21093: Undefined Security Weakness
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromis...
Oracle Database Server security vulnerabilities
Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Oracle Database Sharding for Oracle Database Server. An attacker...