Lucene search
+L

777 matches found

NVD
NVD
•added 2026/10/26 3:16 p.m.•10 views

CVE-2026-116339

A vulnerability was determined in iFlytek astron-agent up to 1.1.2. This affects an unknown function of the file core/memory/database/api/v1/execddl.py of the component DDL Whitelist Handler. This manipulation causes incomplete blacklist. The attack may be initiated remotely. The exploit has been...

7.5CVSS0.00479EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/26 2:30 p.m.•10 views

CVE-2026-116339

A vulnerability exists in iFlytek astron-agent (up to version 1.1.2 ) within the DDL Whitelist Handler component. The issue is located in the file core/memory/database/api/v1/exec_ddl.py, where an unknown function allows for an incomplete blacklist manipulation. This flaw can be triggered via a r...

7.5CVSS6.7AI score0.00479EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/26 2:30 p.m.•7 views

EUVD-2026-109940

A vulnerability was determined in iFlytek astron-agent up to 1.1.2. This affects an unknown function of the file core/memory/database/api/v1/execddl.py of the component DDL Whitelist Handler. This manipulation causes incomplete blacklist. The attack may be initiated remotely. The exploit has been...

7.5CVSS6.7AI score0.00479EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/26 2:30 p.m.•16 views

CVE-2026-116339 iFlytek astron-agent DDL Whitelist exec_ddl.py incomplete blacklist

A vulnerability was determined in iFlytek astron-agent up to 1.1.2. This affects an unknown function of the file core/memory/database/api/v1/execddl.py of the component DDL Whitelist Handler. This manipulation causes incomplete blacklist. The attack may be initiated remotely. The exploit has been...

7.5CVSS0.00479EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/10/23 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-101613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server:...

4.9CVSS7AI score0.00422EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/10/22 10:14 p.m.•14 views

CVE-2026-101613

A flaw was found in the Data Definition Language DDL component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. This flaw primarily results in a complete denial of...

4.9CVSS7AI score0.00422EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/21 12:32 a.m.•8 views

EUVD-2026-106021

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

4.9CVSS6.9AI score0.00422EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/20 10:18 p.m.•9 views

CVE-2026-101613

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

4.9CVSS0.00422EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/10/20 9:21 p.m.•5 views

CVE-2026-101613

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

4.9CVSS6.8AI score0.00422EPSS
SaveExploits0
CVE
CVE
•added 2026/10/20 9:21 p.m.•19 views

CVE-2026-101613

A vulnerability exists in the Server: DDL component of Oracle MySQL products, specifically affecting MySQL Server (versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1). A high privileged attacker with network access...

4.9CVSS6.8AI score0.00422EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•6 views

PT-2026-119293

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

4.9CVSS6.9AI score0.00422EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/20 12:00 a.m.•4 views

Oracle MySQL Vulnerability CVE-2026-101613

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

4.9CVSS6.9AI score0.00422EPSS
SaveExploits0References1
Redos
Redos
•added 2026/10/02 12:00 a.m.•12 views

ROS-20261002-73-0080

The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

4.3CVSS6AI score0.00329EPSS
SaveExploits0
Redos
Redos
•added 2026/10/02 12:00 a.m.•21 views

ROS-20261002-73-0079

The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

4.3CVSS6AI score0.00329EPSS
SaveExploits0
Redos
Redos
•added 2026/10/02 12:00 a.m.•14 views

ROS-20261002-73-0078

The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

4.3CVSS6AI score0.00329EPSS
SaveExploits0
Redos
Redos
•added 2026/10/02 12:00 a.m.•13 views

ROS-20261002-73-0077

The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

4.3CVSS6AI score0.00329EPSS
SaveExploits0
Redos
Redos
•added 2026/10/02 12:00 a.m.•20 views

ROS-20261002-73-0081

The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

4.3CVSS6AI score0.00329EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2026/10/01 3:53 p.m.•29 views

K000163496: PostgreSQL vulnerability CVE-2026-6470

Security Advisory Description Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencin...

4.3CVSS5.5AI score0.00329EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/10/01 11:17 a.m.•18 views

CVE-2026-103253

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute D...

8.7CVSS0.00232EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/01 10:41 a.m.•19 views

CVE-2026-103253 n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute D...

7CVSS6.2AI score
SaveExploits0References4
Rows per page
Query Builder