577 matches found
SQL injection
Added: 04/10/2009 Background Structured Query Language SQL is the most common language understood by modern relational databases. Problem A web program uses input parameters within an SQL query in an unsafe manner. This could allow a remote attacker to inject arbitrary SQL commands via a speciall...
[SECURITY] Fedora 10 Update: postgresql-8.3.7-1.fc10
PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselects and user-defined types and functions. The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL DB...
[SECURITY] Fedora 9 Update: postgresql-8.3.7-1.fc9
PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselects and user-defined types and functions. The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL DB...
Fedora Update for postgresql FEDORA-2007-565
Check for the Version of postgresql OpenVAS Vulnerability Test Fedora Update for postgresql FEDORA-2007-565 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Fedora Update for postgresql FEDORA-2007-198
Check for the Version of postgresql OpenVAS Vulnerability Test Fedora Update for postgresql FEDORA-2007-198 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Fedora Update for postgresql FEDORA-2007-566
Check for the Version of postgresql OpenVAS Vulnerability Test Fedora Update for postgresql FEDORA-2007-566 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
CentOS Update for postgresql CESA-2008:0038 centos4 i386
Check for the Version of postgresql OpenVAS Vulnerability Test CentOS Update for postgresql CESA-2008:0038 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
Fedora Update for hsqldb FEDORA-2007-4171
Check for the Version of hsqldb OpenVAS Vulnerability Test Fedora Update for hsqldb FEDORA-2007-4171 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for hsqldb FEDORA-2007-4119
Check for the Version of hsqldb OpenVAS Vulnerability Test Fedora Update for hsqldb FEDORA-2007-4119 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Preemptive Protection against Microsoft SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability (MS09-004)
A remote code execution vulnerability has been reported in Microsoft SQL Server. Microsoft SQL Server is a relational database management system RDBMS. The flaw is in the way that SQL Server checks parameters in the "spreplwritetovarbin" extended stored procedure. By sending a specially crafted S...
MyODBC Japanese Conversion Edition denial of service vulnerability
Overview MyODBC is an ODBC driver that allows ODBC-compliant applications to communicate with a MySQL database. MyODBC Japanese Conversion Edition is a Windows version of the driver with additional Japanese encoding functionality released from SoftAgency. MyODBC Japanese Conversion Edition contai...
IBM DB2数据库JAR文件处理多个拒绝服务漏洞
BUGTRAQ ID: 28835 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 DB2的RECOVERJAR和REMOVEJAR过程处理畸形参数数据时存在漏洞，如果用特殊参数调用了RECOVERJAR和REMOVEJAR过程的话，就可能导致DB2例程崩溃。 任何DB2数据库用户都可以利用这个漏洞，因为默认为这两个过程分配了PUBLIC权限。 IBM DB2 Universal Database 9.5 IBM DB2 Universal Database...
Firebird关系数据库'protocol.cpp' XDR协议远程内存破坏漏洞
BUGTRAQ ID: 28403 CVE ID:CVE-2008-0387 CNCVE ID:CNCVE-20080387 Firebird Relational Database是一款关系型数据库。 Firebird Relational Database管理器处理XDR协议上部分标签时存在整数溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当src/remote/protocol.cpp解析器接收到如下非法数据的操作时： opreceive opstart opstartandreceive opsend opstartandsend...
solidDB Detection
The remote service is running solidDB, a relational database designed for fast and always-on access. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31680; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...
Firebird 2.0.3 Relational Database - protocol.cpp XDR Protocol Remote Memory Corruption
Firebird 2.0.3 Relational Database - protocol.cpp XDR Protocol Remote Memory Corruption source: https://www.securityfocus.com/bid/27403/info Firebird is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to...
[SECURITY] Fedora 7 Update: hsqldb-1.8.0.8-1jpp.5.fc7
HSQLdb is a relational database engine written in JavaTM , with a JDBC driver, supporting a subset of ANSI-92 SQL. It offers a small about 100k, fast database engine which offers both in memory and disk based tables. Embedded and server modes are available. Additionally, it includes tools such as...
[SECURITY] Fedora 8 Update: hsqldb-1.8.0.8-1jpp.5.fc8
HSQLdb is a relational database engine written in JavaTM , with a JDBC driver, supporting a subset of ANSI-92 SQL. It offers a small about 100k, fast database engine which offers both in memory and disk based tables. Embedded and server modes are available. Additionally, it includes tools such as...
hsqldb, openoffice.org security update
CentOS Errata and Security Advisory CESA-2007:1048 Updated openoffice.org and hsqldb packages that fix security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenOffice.org is an office...
Debian DSA-1463-1 : postgresql-7.4 - several vulnerabilities
Several local vulnerabilities have been discovered in PostgreSQL, an object-relational SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3278 It was discovered that the DBLink module performed insufficient credential validation. This iss...