Lucene search
+L

2921 matches found

Positive Technologies
Positive Technologies
added 2024/09/10 12:0 a.m.9 views

PT-2024-6305 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the OLE DB driver for SQL Server on Windows operating systems. This can be exploited by a remote attacker to disclose...

8CVSS7.4AI score0.0126EPSS
SaveExploits0References5
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.168 views

Oracle DB SQL Injection Via SYS.DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle DB SQL Injection via SYS.DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION', 'Description' = %q This module will escalate an Oracle DB user to DBA by...

7.5CVSS7.1AI score0.4167EPSS
SaveExploits8
Tenable Nessus
Tenable Nessus
added 2024/08/23 12:0 a.m.20 views

IBM DB2 DoS (7165338) (Windows)

According to its self-reported version number, IBM Db2 on Windows is vulnerable to a denial of service as the server may crash when using a specially crafted query on columnar tables in a database partitioned environment. Note that Nessus has not tested for this issue but has instead relied only ...

6.5CVSS7.5AI score0.00553EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/08/14 12:0 a.m.20 views

The vulnerability of the InnoDB component of the MySQL Database Server, which allows a hacker to cause a service failure

The vulnerability of the InnoDB component in the MySQL Database Management System is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures using the MySQL protocol...

6.8CVSS6.3AI score0.00904EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.11 views

The vulnerability of the OLE DB driver for SQL Server, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS6.2AI score0.01675EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2024/08/06 4:30 p.m.11 views

Security Bulletin: IBM OpenPages is affected by multiple security vulnerabilities of DB2 Database Server (June 2024)

Summary IBM® Db2® Database Server is shipped as a supporting program of IBM OpenPages. Information about security vulnerabilities affecting IBM Db2 Database Server has been published in multiple security bulletins. Vulnerability Details Refer to the security bulletins listed in the...

6.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/19 12:0 a.m.16 views

The vulnerability of the Java VM component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS7.2AI score0.00432EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/07/19 12:0 a.m.140 views

Oracle Database Server (Jul 2024 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory. - Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be...

7.5CVSS6.7AI score0.54026EPSS
SaveExploits2References13
NCSC
NCSC
added 2024/07/17 1:51 p.m.7 views

Vulnerabilities fixed in Oracle Database Server

Vulnerabilities have been fixed in Oracle Database Server. A malicious party can exploit the vulnerabilities to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS. Access to sensitive data Manipulation of data Circumvention of security measure Oracle ha...

7.5CVSS7.7AI score0.01466EPSS
SaveExploits1References9
NVD
NVD
added 2024/07/16 11:15 p.m.45 views

CVE-2024-21184

Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. Supported versions that are affected are 19.3-19.23. Easily exploitable vulnerability allows high privileged attacker having Execute on SYS.XSDIAG privilege with network access via Oracle Net to compromise...

7.2CVSS0.00529EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/16 11:15 p.m.47 views

CVE-2024-21174

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.23, 21.3-21.14 and 23.4. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to...

3.1CVSS0.00318EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/16 11:15 p.m.7 views

CVE-2024-21174

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.23, 21.3-21.14 and 23.4. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to...

3.1CVSS5.8AI score0.00318EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/16 10:40 p.m.98 views

CVE-2024-21174

CVE-2024-21174 affects Oracle Database Server's Java VM component across 19.3–19.23, 21.3–21.14, and 23.4. The root cause is improper resource clearance/release in the Java VM, allowing a low-privileged attacker with Create Session and Create Procedure privileges and network access via Oracle Net...

3.1CVSS2.6AI score0.00318EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/07/16 12:0 a.m.9 views

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause MySQL Server to hang without authorization or crash frequently and repeatedly full DOS...

4.9CVSS6AI score0.00863EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/07/16 12:0 a.m.8 views

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause MySQL Server to hang without authorization or crash frequently and repeatedly full DOS...

4.9CVSS6AI score0.00857EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/07/16 12:0 a.m.12 views

PT-2024-4993 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.23 Description: The issue is related to insufficient input validation in the Oracle Database Core component. This allows a high-privileged attacker with SYSDBA privilege and logon access to the...

2.3CVSS7.3AI score0.00172EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/07/16 12:0 a.m.14 views

PT-2024-4992 · Oracle · Oracle Database Server +1

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.23 Oracle Database Server versions 21.3 through 21.14 Description: The issue is related to insufficient input validation in the Oracle Database Portable Clusterware component, allowing an...

6.8CVSS7.2AI score0.00493EPSS
SaveExploits0References7
Citrix
Citrix
added 2024/07/13 12:0 a.m.17 views

Critical Error: "Unable to contact the database server. Ensure Provisioning Services is configured correctly"

When starting Provisioning Services Console, the following error appears: “Critical Error: Unable to contact the database server. Ensure Provisioning Services is configured correctly”. Background After running the Configuration Wizard and configuring a user account for the Provisioning Services,...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2024/07/13 12:0 a.m.13 views

How to Manually Create a Database for Provisioning Services

This article describes how to manually create a database for Provisioning Services when the database administrator prefers to create the database manually. Requirements The DbScript.exe file located in “C:\Program Files\Citrix\Provisioning Services”. SQL Database Server. SysAdmin privileges to ru...

7.5AI score
SaveExploits0
OSV
OSV
added 2024/07/09 5:15 p.m.7 views

CVE-2024-21414

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01854EPSS
SaveExploits0References1
Rows per page
Query Builder