Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

GBase 8s database suffers from a boost vulnerability (CNVD-2020-65128)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65124)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a privilege lifting vulnerability, which can be exploited by an attacker to perform operations with root privileges...

SQL Injection Vulnerability in Zhejiang Shenda Kiosk Management System (CNVD-2020-64875)

Zhejiang Shenda Intelligent Group is a company focusing on providing intelligent tourism whole industry chain product innovation, industrial planning and operation services. A SQL injection vulnerability exists in the Zhejiang Shenda kiosk management system, which can be exploited by attackers to...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65123)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a privilege extraction vulnerability, which can be exploited by an attacker to modify /etc/passwd privileges via a symbolic link attack...

SQL Injection Vulnerability in Shield Spirit Voting Sucker System (CNVD-2020-62833)

Shield Spirit Voting Powder Sucking System can be applied to the public number, through the WeChat public number of the message interface to collect the user to send the vote number of the data to reach the vote, with anti-brush voting voting function, but also efficiently suck the live powder...

SQL Injection Vulnerability in SETA Management System

The SETA Management System is software that assists instructors in their teaching duties and helps students participate in courses online, while supporting access to parts of the content by students not in the course and course management by administrators. The SETA Management System suffers from...

CVE-2020-23945

A SQL injection vulnerability exists in Victor CMS V1.0 in the catid parameter of the category.php file. This parameter can be used by sqlmap to obtain data information in the database...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58244)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: DML component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...

U.S. Dept Of Defense: SQL Injection in www.██████████

Description: SQL Injection is a vulnerability which allows interference with the queries performed on a database, to obtain sensitive information which could be really useful to attackers. A web application database is often queried using user-requests parameters, which when are not properly...

CVE-2020-14742

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having SYSDBA level account privilege with network access via Oracle Net to...

Vulnerability fixed in IBM Db2

IBM has fixed a vulnerability in Db2 and Db2 Connect. A unauthenticated remote malicious party can exploit the vulnerability potentially exploit it to cause a denial-of-service. IBM has released updates to fix the vulnerability. For more information, see:...

SQL Injection Vulnerability in Meizhou Haineng Technology Co.

Meizhou Haineng Technology Co., Ltd. was formerly known as "Zhengda network" studio, once supplies "Haineng network", April 24, 2017 officially changed its name to "Meizhou Haineng Technology Co. "Ltd. It is an innovative interactive integrated hosting marketing company that specializes in user...

CVE-2020-25990

WebsiteBaker 2.12.2 allows SQL Injection via parameter 'displayname' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

SQL Injection Vulnerability in Aja***.ashx, an Intelligent Tourism System of iSoftStone Macau Ltd.

iSoftStone Macau is mainly engaged in software design and development, information technology services. SQL injection vulnerability exists in Aja.ashx, the intelligent tourism system of iSoftStone Macau, which can be exploited by attackers to obtain sensitive information from the database...

mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Audit. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

mysql: Server: Locking unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Locking. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...

The vulnerability of the relational database management system used by Microsoft Access programs within the Microsoft Office and Office 365 suites allows a perpetrator to execute arbitrary code.

The vulnerability of the relational database management system used by Microsoft Access programs within the Microsoft Office and Office 365 suites exists due to errors in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the PostgreSQL database management system, related to out-of-bound accesses, allows attackers to trigger a service failure.

The vulnerability of the PostgreSQL database management system is related to out-of-memory conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...

mysql: InnoDB unspecified vulnerability (CPU Jul 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...