Lucene search
+L

5006 matches found

CNVD
CNVD
added 2021/07/21 12:00 a.m.11 views

Unspecified Vulnerability in Oracle Database Server (CNVD-2021-54735)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Java VM component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An attacker...

4.3CVSS6.1AI score0.0084EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/07/21 12:00 a.m.33 views

Oracle Database Server has an unspecified vulnerability (CNVD-2021-54737)

Oracle Database Server is an object-one relational database management system that provides an open, comprehensive, and integrated approach to information management. a security vulnerability exists in the Oracle XML DB component of Oracle Database Server versions 12.1.0.2, 12.2.0.1, and 19c. An...

7.2CVSS3.9AI score0.01EPSS
SaveExploits0References1
zdt
zdt
added 2021/07/21 12:00 a.m.178 views

WordPress Backup Guard Authenticated Remote Code Execution Exploit

This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of the uploaded file extension which should be of SGBP...

7.2CVSS0.6AI score0.84112EPSS
SaveExploits9
Vulnrichment
Vulnrichment
added 2021/07/20 10:43 p.m.14 views

CVE-2021-2337

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle...

7.2CVSS6.5AI score0.01289EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/20 10:43 p.m.41 views

CVE-2021-2337

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle...

7.2CVSS7.7AI score0.01289EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/20 10:43 p.m.95 views

CVE-2021-2337

CVE-2021-2337 affects Oracle Database Server’s XML DB component . Affected are Oracle 12.1.0.2, 12.2.0.1, and 19c. The issue allows a high-privilege attacker with privileges such as Create Any Procedure and Create Public Synonym and network access via Oracle Net to compromise Oracle XML DB, poten...

7.2CVSS7AI score0.01289EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/07/20 10:43 p.m.11 views

CVE-2021-2333

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Alter User privilege with network access via Oracle Net to compromise Oracle XML DB...

4.9CVSS5.8AI score0.00901EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/20 10:43 p.m.104 views

CVE-2021-2333

CVE-2021-2333 affects Oracle Database Server’s XML DB component. Impacted: Oracle versions 12.1.0.2, 12.2.0.1, and 19c. An attacker with Alter User privilege and network access via Oracle Net can gain unauthorized access to Oracle XML DB data. CVSSv3.1 base score: 4.9 (Confidentiality only). Reme...

4.9CVSS4.5AI score0.00901EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/20 10:43 p.m.28 views

CVE-2021-2333

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Alter User privilege with network access via Oracle Net to compromise Oracle XML DB...

4.9CVSS5.8AI score0.00901EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/20 10:43 p.m.124 views

CVE-2021-2329

CVE-2021-2329 is an Oracle Database Server vulnerability affecting the XML DB component in versions 12.1.0.2, 12.2.0.1, and 19c. The vulnerability enables a high-privilege attacker with Create Any Procedure and Create Public Synonym privileges, over a network via Oracle Net, to take over the Orac...

7.2CVSS6.6AI score0.01EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/07/20 10:43 p.m.8 views

CVE-2021-2329

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle...

7.2CVSS6.5AI score0.01EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/20 10:43 p.m.28 views

CVE-2021-2329

Vulnerability in the Oracle XML DB component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Public Synonym privilege with network access via Oracle...

7.2CVSS7.7AI score0.01EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/20 11:15 a.m.26 views

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

8.8CVSS0.01262EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/20 11:15 a.m.24 views

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

8.8CVSS7.4AI score
SaveExploits0References1
Prion
Prion
added 2021/07/20 11:15 a.m.21 views

Design/Logic Flaw

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

6.5CVSS8.9AI score0.01262EPSS
SaveExploits0References1Affected Software3
UbuntuCve
UbuntuCve
added 2021/07/20 11:15 a.m.27 views

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

8.8CVSS7.2AI score0.01262EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/20 11:15 a.m.10 views

UBUNTU-CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

8.8CVSS5.9AI score0.01262EPSS
SaveExploits0References3
CVE
CVE
added 2021/07/20 10:44 a.m.76 views

CVE-2021-27021

CVE-2021-27021 affects Puppet DB. A flaw enables privilege escalation that allows a user to delete tables via an SQL query. This is corroborated across NVD, OSV, Nessus/NASL plugins, and OSV Debian/Ubuntu entries. The connected documents do not specify affected versions, root cause details, explo...

8.8CVSS8.8AI score0.01262EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2021/07/20 10:44 a.m.55 views

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

9.2AI score0.01262EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2021/07/20 10:44 a.m.24 views

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

8.8CVSS9AI score0.01262EPSS
SaveExploits0
Rows per page
Query Builder