Remote Code Execution (RCE)

PostgreSQL is vulnerable to remote code execution RCE. Due to a flaw found in the way PostgreSQL enforced permission checks on scripts written in PL/Tcl, if the PL/Tcl procedural language was registered on a particular database, an authenticated database user running a specially-crafted PL/Tcl...

Denial Of Service (DoS)

PostgreSQL is vulnerable to denial of service DoS.It is due to an integer overflow in src/backend/executor/nodeHash.c, allowing an attacker to use a malicious SQL query to cause a temporary denial of service postgres daemon crash or, potentially, execute arbitrary code with the privileges of the...

Denial Of Service (DoS)

PostgreSQL is vulnerable to Denial Of Service DoS. A buffer overflow flaw was found in the way PostgreSQL retrieved a substring from the bit string for BIT and BIT VARYING SQL data types. An authenticated database user running a specially-crafted SQL query could use this flaw to cause a temporary...

RSA BSAFE Micro Edition Suite Cryptographic Key Management Failure

The vulnerabilities of the RSA BSAFE Micro Edition Suite, Oracle Security Service, Oracle Database Server, the network software Oracle Communications IP Service Activator, and the virtualization management system Enterprise Manager Ops Center are related to errors in managing cryptographic keys...

Microsoft SQL Server Code Execution

The vulnerability of the Microsoft SQL Server relational database management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Database Gateway for ODBC Oracle Database DoS

The vulnerability of the Oracle Database Server ODBC driver database server’s firewall is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the OracleNet network protocol...

Oracle Database Server Unauthorized Access

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the OracleNet...

Oracle Database Server DoS

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to completely disrupt service delivery using the OracleNet network protocol...

Oracle Database Server Data Modification

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data using the OracleNet network...

Database Gateway for ODBC Oracle Database Server Full Control

The vulnerability of the Oracle Database Server ODBC driver’s database server lies in its lack of access control mechanisms. Exploiting this vulnerability allows an attacker to gain full control over the application through the OracleNet network protocol...

Oracle Database Server DoS

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the OracleNet network protocol...

Oracle Database Server Java VM Full Control

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application by using network protocols...

MySQL Server DoS

The vulnerability of the MySQL Server component relates to errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Oracle Application DBA Privilege Escalation

The vulnerability of the Oracle Application component, specifically the DBA component of the Oracle Database Server system, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or cause service interruptions...

Oracle MySQL Audit Plugin Data Access

The vulnerability of the Server component of the Oracle MySQL Server database management system’s Audit Plugin is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using the MyS...

RSA BSAFE Micro Edition Information Disclosure

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service software, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are related...

RSA BSAFE Micro Edition

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are related to the u...

RSA BSAFE Micro Edition DoS

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are due to numerical...

RSA BSAFE Micro Edition Suite Uncontrolled Resource Consumption

The vulnerabilities of the RSA BSAFE Micro Edition Suite, BSAFE Crypto-C Micro Edition, and Oracle Security Service, as well as the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center...

Oracle Database Server Multiple Vulnerabilities (Jan 2020 CPU)

The remote Oracle Database Server is missing the January 2020 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists in the Core RDBMS component of Oracle Database Server. An authenticated, remote attacker can exploit this...