CVE-2020-14742

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having SYSDBA level account privilege with network access via Oracle Net to...

Vulnerability fixed in IBM Db2

IBM has fixed a vulnerability in Db2 and Db2 Connect. A unauthenticated remote malicious party can exploit the vulnerability potentially exploit it to cause a denial-of-service. IBM has released updates to fix the vulnerability. For more information, see:...

SQL Injection Vulnerability in Meizhou Haineng Technology Co.

Meizhou Haineng Technology Co., Ltd. was formerly known as "Zhengda network" studio, once supplies "Haineng network", April 24, 2017 officially changed its name to "Meizhou Haineng Technology Co. "Ltd. It is an innovative interactive integrated hosting marketing company that specializes in user...

CVE-2020-25990

WebsiteBaker 2.12.2 allows SQL Injection via parameter 'displayname' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

SQL Injection Vulnerability in Aja***.ashx, an Intelligent Tourism System of iSoftStone Macau Ltd.

iSoftStone Macau is mainly engaged in software design and development, information technology services. SQL injection vulnerability exists in Aja.ashx, the intelligent tourism system of iSoftStone Macau, which can be exploited by attackers to obtain sensitive information from the database...

mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Audit. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

mysql: Server: Locking unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Locking. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...

The vulnerability of the relational database management system used by Microsoft Access programs within the Microsoft Office and Office 365 suites allows a perpetrator to execute arbitrary code.

The vulnerability of the relational database management system used by Microsoft Access programs within the Microsoft Office and Office 365 suites exists due to errors in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the PostgreSQL database management system, related to out-of-bound accesses, allows attackers to trigger a service failure.

The vulnerability of the PostgreSQL database management system is related to out-of-memory conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...

mysql: InnoDB unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

SQL injection vulnerability in pr***.aspx of the website building system page of Jacko Network Design Studio (CNVD-2020-52259)

Jacko Network Design Studio is an integrated communication agency with multi-faceted professional services such as website construction, graphic design, advertising production and printing. There is a SQL injection vulnerability in pr.aspx, which can be exploited by attackers to obtain sensitive...

Yixing Yifa Network Service Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2020-51547)

Yixing Yifa Network Service Co., Ltd. is a company with website construction, WeChat public platform, WeChat marketing as the main business. Yixing Yifa Network Service Co., Ltd. website building system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive informati...

Shanghai Zhihu Information Technology Website Building System suffers from SQL Injection Vulnerability

Shanghai Zhihu Information Technology Co., Ltd. is a high-tech enterprise focusing on software customization and product development. Shanghai Zhihu Information Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information fro...

SQL Injection Vulnerability in Website Building System of Shenzhen Shenzhou Tongda Network Technology Co.

Shenzhen Shenzhou Tongda Network Technology Co., Ltd, provides Tencent enterprise mailbox, high-end website construction PC website, cell phone website, WeChat public account, SEO optimization and promotion, enterprise WeChat and other network infrastructure services and network marketing and...

SQL Injection Vulnerability in Instant Messaging Manager

Instant Messaging Manager is a tool that combines communication capabilities. Instant Messaging Manager suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Vulnerability of the MySQL Server component: Security: Roles of the database management system, which allows attackers to gain unauthorized access to protected information or to modify, add, or delete data.

Vulnerability of the MySQL Server component: Security: The roles of the MySQL Server database management system are related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information or to...

rConfig SQL Injection Vulnerability (CNVD-2020-43136)

rConfig is an open source network configuration management utility . A SQL injection vulnerability exists in rConfig version 3.9.5, which can be exploited by a remote attacker to view, add, modify or delete information in the back-end database by sending specially crafted SQL statements to the...

Denial of Service Vulnerability in gbase 8a at Tianjin Nanda General Data Technology Co.

GBase 8a is a secure database management system. A denial of service vulnerability exists in gbase 8a of Tianjin Nanda General Data Technology Co. Ltd. that can be exploited by attackers to cause a denial of service in the database management system...

SQL Injection Vulnerability in 5vshop E-commerce System of Shijiazhuang Zhenhong Network Technology Co.

5vshop belongs to Shijiazhuang Zhenghong Network Technology Co., Ltd, since 2004 has been committed to the enterprise Internet application of related services, engaged in enterprise, personal e-commerce website construction; e-commerce project planning, creativity, operation, to provide a...

SQL Injection Vulnerability in Hefei Blue Collar Business Co.

Hefei Blue Collar Business Information Co., Ltd. SEO team, founded in 2008, since its inception has been studying the combination of website Baidu optimization, Internet marketing, website construction. To provide enterprises with a full range of information technology application program. Hefei...