3822 matches found
CVE-2021-25275
SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login...
CVE-2021-25275
SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login...
Oracle Database Server RDBMS Sharding Full Control
The vulnerability of Oracle Database Server’s RDBMS sharding component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application using Oracle Net technology...
MySQL Server DoS
The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
MySQL InnoDB Data Access Privilege
The vulnerability of the InnoDB component in the MySQL Database Management System exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain read access to data or gain privileged access to the infrastructure...
MySQL Server PAM Auth DoS
The vulnerability of the MySQL Server component’s PAM Auth Plugin is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...
MySQL Server DoS
The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
[SECURITY] [DLA 2538-1] mariadb-10.1 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2538-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 31, 2021 https://wiki.debian.org/LTS -...
PT-2021-16467
Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS versions not specified OfficeScan XG SP1 version not specified Description: An improper access control issue could allow an unauthenticated user to obtain information about the database server...
Oracle Application Express Survey Builder XSS
The vulnerability of the Oracle Application Express Survey Builder component of the Oracle Database Server database management system is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...
Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Sourcing
Summary Multiple Oracle Database Server security vulnerabilities affect IBM Emptoris Sourcing. Vulnerability Details CVEID: CVE-2020-14741 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database Filesystem component could allow an authenticated attacker to caus...
Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Supplier Lifecycle Mgmt
Summary Multiple Oracle Database Server security vulnerabilities affect IBM Emptoris Supplier Lifecycle Mgmt. Vulnerability Details CVEID: CVE-2020-14741 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database Filesystem component could allow an authenticated...
Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform
Summary Multiple Oracle Database Server Security Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform Vulnerability Details CVEID: CVE-2020-14741 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database Filesystem component could allow an...
Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Contract Management
Summary Multiple Oracle Database Server security vulnerabilities affect IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2020-14741 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database Filesystem component could allow an authenticated...
Security Bulletin: Multiple Oracle Database Server Vulnerabilities Affect IBM Emptoris Program Management
Summary Multiple Oracle Database Server security vulnerabilities affect IBM Emptoris Program Management. Vulnerability Details CVEID: CVE-2020-14741 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the Database Filesystem component could allow an authenticated attack...
Oracle Database Server Multiple Vulnerabilities (Jan 2021 CPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2021 CPU advisory. - Vulnerability in the RDBMS Scheduler component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c...
Microsoft SQL Server Code Execution
The vulnerability of the Microsoft SQL Server relational database management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Vulnerabilities fixed in Oracle Database Server
Oracle has fixed vulnerabilities in the following Oracle Database Server products: Database - Enterprise Edition Text Advanced Networking Option Application Express APEX PERL The vulnerabilities allow an unauthenticated malicious person with network access to the vulnerable system may be able to...
CVE-2021-2117
Vulnerability in the Oracle Application Express Survey Builder component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromi...
CVE-2021-2117
Vulnerability in the Oracle Application Express Survey Builder component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromi...