Lucene search
+L

2926 matches found

Cvelist
Cvelist
added 2023/01/31 12:00 a.m.39 views

CVE-2023-22611

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 formerly known as...

7.5CVSS7.4AI score0.00569EPSS
SaveExploits0References1
CVE
CVE
added 2023/01/31 12:00 a.m.66 views

CVE-2023-22610

CVE-2023-22610 affects Schneider Electric EcoStruxure Geo SCADA Expert (Geo SCADA server) with an Incorrect Authorization (CWE-863) flaw that could cause Denial of Service when specific messages are sent over the database server TCP port. Public details in connected sources indicate vulnerable Ec...

9.1CVSS7.4AI score0.0057EPSS
SaveExploits0References1Affected Software3
Vulnrichment
Vulnrichment
added 2023/01/31 12:00 a.m.13 views

CVE-2023-22610

A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port...

9.1CVSS9.2AI score0.0057EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/01/31 12:00 a.m.42 views

CVE-2023-22610

A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port...

9.1CVSS9.3AI score0.0057EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/01/31 12:00 a.m.12 views

The vulnerability of the Oracle Data Provider for .NET component in the Oracle Database Server database management system allows a hacker to gain full control over the application.

The vulnerability of the Oracle Data Provider for .NET component in the Oracle Database Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application using the TCPS protocol...

7.6CVSS6.9AI score0.00594EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.8 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.3AI score0.0086EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.9 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.3AI score0.0086EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.11 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.3AI score0.0086EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.18 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.3AI score0.0086EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.8 views

Vulnerability of the Server component: The MySQL Server database management system’s Optimizer component allows a hacker to gain unauthorized access to read, modify, or delete data.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data...

4CVSS6.3AI score0.00643EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.10 views

Vulnerability of the MySQL Server component of the database management system for GIS applications, which allows attackers to cause service interruptions.

The vulnerability of the MySQL Server component of the database management system for GIS-related applications is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.3AI score0.43403EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.9 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.6AI score0.00887EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.13 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.3AI score0.0086EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.14 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.3AI score0.0086EPSS
SaveExploits0References5Affected Software2
Tenable Nessus
Tenable Nessus
added 2023/01/20 12:00 a.m.218 views

Oracle Database Server for Unix (Jan 2023 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2023 CPU advisory. - Vulnerability in the Oracle Database - Machine Learning for Python Python component of Oracle Database Server. The supported version that ...

9.8CVSS7.2AI score0.99931EPSS
SaveExploits49References18
Qualys Blog
Qualys Blog
added 2023/01/18 12:43 a.m.133 views

The January 2023 Oracle Critical Patch Update

This Oracle Critical Patch Update contains a group of patches for multiple security vulnerabilities that address 327 new security patches. Some of the vulnerabilities addressed this month impact various products. These patches address vulnerabilities in Oracle code and in third-party components...

10CVSS1.2AI score0.99931EPSS
SaveExploits148
OSV
OSV
added 2023/01/18 12:30 a.m.61 views

GHSA-5PM2-9MR2-3FRQ Component takeover in Oracle Data Provider for .NET

Vulnerability in the Oracle Data Provider for .NET component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCPS to compromise Oracle Data Provider for .NET. Successful...

7.5CVSS7.5AI score0.00594EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/01/18 12:30 a.m.62 views

Component takeover in Oracle Data Provider for .NET

Vulnerability in the Oracle Data Provider for .NET component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCPS to compromise Oracle Data Provider for .NET. Successful...

7.5CVSS7.1AI score0.00594EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2023/01/18 12:15 a.m.8 views

CVE-2023-21893

Vulnerability in the Oracle Data Provider for .NET component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCPS to compromise Oracle Data Provider for .NET. Successful...

7.5CVSS7.2AI score0.00594EPSS
SaveExploits0References1
NVD
NVD
added 2023/01/18 12:15 a.m.57 views

CVE-2022-39429

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of...

4.3CVSS3.7AI score0.00561EPSS
SaveExploits0References1
Rows per page
Query Builder