PT-2021-7151

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2, 12.2.0.1 and 19c Description The issue exists due to insufficient input validation in the Oracle Text component of Oracle Database Server. This allows a remote attacker to execute arbitrary code using...

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management.Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c contain a security vulnerability in the Oracle Database - Enterprise...

PT-2021-7122

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2 through 19c Description The issue is related to insufficient input validation in the Java VM component of Oracle Database Server. This allows a low-privileged attacker with Create Procedure privilege an...

PT-2021-7121

Name of the Vulnerable Software and Affected Versions Oracle Database Server version 19c Description The issue is related to insufficient input validation in the Core RDBMS component of Oracle Database Server. This allows a low-privileged attacker with Create Table privilege and network access vi...

PT-2021-7100

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 12.1.0.2 through 19c Description The issue is related to insufficient input validation in the Oracle XML DB component, allowing a high-privileged attacker with network access via Oracle Net to compromise Oracle...

PT-2021-7112

Name of the Vulnerable Software and Affected Versions Oracle Application Express Data Reporter versions prior to 21.1.0.00.04 Description The issue is related to insufficient input validation in the Oracle Application Express Data Reporter component of Oracle Database Server. This easily...

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management. a security vulnerability exists in the Oracle XML DB component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An...

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management. a security vulnerability exists in the Oracle XML DB component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An...

Oracle Database Server 授权问题漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. A security vulnerability exists in the Advanced Networking Option component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c, which could be exploited to cause an attacker to take over...

CVE-2021-2460: Undefined Security Weakness

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...

CVE-2021-2335: Undefined Security Weakness

Vulnerability in the Oracle Database - Enterprise Edition Data Redaction component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access vi...

CVE-2021-2333: Undefined Security Weakness

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Alter User privilege with network access via Oracle Net to compromise Oracle XML DB...

CVE-2021-2329: Undefined Security Weakness

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle...

CVE-2021-2326: Undefined Security Weakness

Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise Database Vault. Successful...

CVE-2021-2337: Undefined Security Weakness

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle...

CVE-2021-2330: Undefined Security Weakness

Vulnerability in the Core RDBMS component of Oracle Database Server. The supported version that is affected is 19c. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this...

CVE-2021-2328: Undefined Security Weakness

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Alter Any Table privilege with network access via Oracle Net to...

CVE-2021-2438: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM...

Oracle MySQL Server 输入验证错误漏洞

Oracle MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. A security vulnerability exists in the Server: Replication component in Oracle MySQL Server 5.7.34, 8.0.25 and earlier versions. An attacker can exploit this vulnerability to...

CVE-2021-21704

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute, execute, fetch and others by returning invalid response data that is not...