6298 matches found
Exploit for Cross-site Scripting in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System
CVE-2021-42662 CVE-2021-42662 - Stored Cross-Site Scripting vu...
Exploit for Cross-site Scripting in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System
CVE-2021-42662 CVE-2021-42662 - Stored Cross-Site Scripting vu...
Google Chromium Indexed DB API Use-After-Free Vulnerability
Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including,...
Public Clouds & Shared Responsibility: Lessons from Vulnerability Disclosure
The inexorable movement of data and applications to the cloud that began several years ago and accelerated during the pandemic shows no signs of slowing down. The rationale for this transformation is driven by a desire to outsource non-critical functions building and maintaining data centers,...
Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Sourcing (CVE-2021-2329)
Summary An Oracle database server vulnerability has been addressed by BM Emptoris Sourcing. Vulnerability Details CVEID: CVE-2021-2329 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the XML DB component could allow an authenticated attacker to take control of the...
Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Contract Management (CVE-2021-2329)
Summary An Oracle database server vulnerability has been addressed by IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2021-2329 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the XML DB component could allow an authenticated attacker to take...
Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Strategic Supply Management Platform (CVE-2021-2329)
Summary An Oracle database server vulnerability has been addressed by IBM Emptoris Strategic Supply Management Platform. Vulnerability Details CVEID: CVE-2021-2329 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related to the XML DB component could allow an authenticated...
Oracle Database Server Multiple Vulnerabilities (October 2021 CPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2021 CPU advisory. - Vulnerability in the Zero Downtime DB Migration to Cloud component of Oracle Database Server. The supported version that is affected is 21...
CVE-2021-35599
Vulnerability in the Zero Downtime DB Migration to Cloud component of Oracle Database Server. The supported version that is affected is 21c. Easily exploitable vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where Zero Downtime DB...
Design/Logic Flaw
Vulnerability in the Zero Downtime DB Migration to Cloud component of Oracle Database Server. The supported version that is affected is 21c. Easily exploitable vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where Zero Downtime DB...
CVE-2021-35599
Vulnerability in the Zero Downtime DB Migration to Cloud component of Oracle Database Server. The supported version that is affected is 21c. Easily exploitable vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where Zero Downtime DB...
CVE-2021-35599
Vulnerability CVE-2021-35599 affects the Oracle Database Server Zero Downtime DB Migration to Cloud component (21c). Root cause described as an input validation/validation flaw enabling a high-privilege attacker with local logon to compromise the Zero Downtime DB Migration to Cloud, potentially t...
CVE-2021-35599
Vulnerability in the Zero Downtime DB Migration to Cloud component of Oracle Database Server. The supported version that is affected is 21c. Easily exploitable vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where Zero Downtime DB...
Oracle Database Server Input Validation Error Vulnerability (CNVD-2021-101532)
Oracle Database Server is a relational database management system from Oracle Corporation. The Zero Downtime DB Migration to Cloud component of Oracle Database Server version 21c is vulnerable to an input validation error that could be exploited to cause an attacker to take over Zero Downtime DB...
PT-2021-21003
Name of the Vulnerable Software and Affected Versions: Oracle Database Server version 21c Description: The issue affects the Zero Downtime DB Migration to Cloud component, allowing a high-privileged attacker with local logon privilege to compromise it. Successful attacks can result in the takeove...
CVE-2021-35599: Undefined Security Weakness
Vulnerability in the Zero Downtime DB Migration to Cloud component of Oracle Database Server. The supported version that is affected is 21c. Easily exploitable vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where Zero Downtime DB...
Apache DB DdlUtils code issue vulnerability
Apache DB DdlUtils is a small, easy-to-use component from the Apache Foundation for working with database definition DDL files.A code issue vulnerability exists in Apache DB DdlUtils 1.0, which stems from an insecure BinaryObjectsHelper class that uses ObjectInputStream.readObject when failing to...
Exploit for Server-Side Request Forgery in Redhat Keycloak
Keycloak-12.0.1-CVE-2020-10770 Keycloak 12.0.1 - 'requestu...
SQL Injection
froxlor/froxlor is vulnerable to SQL injection. An unauthenticated attacker is able to inject and execute arbitrary SQL commands in the database through Database/Manager/DbManagerMySQL.php via a custom DB name...
