410 matches found
Oracle Database 12.1.0.2 Spatial Component Privilege Escalation Vulnerability
Oracle Database version 12.1.0.2 suffers from a privilege escalation vulnerability that achieves DBA access via the Spatial component. Title: Oracle Database Privilege Escalation Through Oracle Spatial Component Product: Database Manufacturer: Oracle Affected Versions: 12.1.0.2 Tested Versions:...
Oracle Database 12.1.0.2 Spatial Component Privilege Escalation
Title: Oracle Database Privilege Escalation Through Oracle Spatial Component Product: Database Manufacturer: Oracle Affected Versions: 12.1.0.2 Tested Versions: 12cR1 Risk Level: High Solution Status: Fixed in Oracle Critical Patch Update October 2021 CVE Reference: N/A, Backported in Oracle CPU...
Oracle Database Server (Oct 2022 CPU)
The 19c and 21c versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2022 CPU advisory. - Vulnerability in the Oracle Database - Machine Learning Numpy component of Oracle Database Server. The supported version that ...
Vulnerabilities fixed in Oracle Database Server
Vulnerabilities have been fixed in Oracle Database Server. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data Orac...
Vulnerabilities fixed in Oracle Database Server
Oracle has fixed vulnerabilities in the following products: Oracle Database Server Oracle Database - Enterprise Edition RDBMS Security. Oracle Spatial and Graph Oracle Universal Installer Oracle Application Express Oracle SQLcl The vulnerabilities potentially enable a malicious party to perform...
Vulnerabilities fixed in Oracle Database Server
Oracle has fixed vulnerabilities in the following products: Database - Enterprise Edition Database Configuration Assistant Spatial and Graph Application Express APEX The vulnerabilities potentially enable a malicious party to execute attacks that result in the following categories of damage:...
Improve Your Hacking Skills with 9 Python Courses for Just $39
For anyone with interest in cybersecurity, learning Python is a must. The language is used extensively in white hat hacking, and professionals use Python scripts to automate tests. It also has a use in the "soft" side of cybersecurity — like scraping the web for compromised data and detecting bug...
[SECURITY] Fedora 36 Update: libspatialite-5.0.1-12.fc36
SpatiaLite is a a library extending the basic SQLite core in order to get a full fledged Spatial DBMS, really simple and lightweight, but mostly OGC-SFS compliant...
[SECURITY] Fedora 36 Update: geos-3.10.2-4.fc36
GEOS Geometry Engine - Open Source is a C++ port of the Java Topology Suite JTS. As such, it aims to contain the complete functionality of JTS in C++. This includes all the OpenGIS "Simple Features for SQL" spatial predicate functions and spatial operators, as well as specific JTS topology...
Vulnerabilities fixed in Oracle Database Server
Oracle has fixed vulnerabilities in the following Oracle Database Server products: Database - Enterprise Edition Database Configuration Assistant Spatial and Graph Application Express APEX Engineered Systems Utilities The vulnerabilities allow a malicious person to carry out attacks execute attac...
OSV-2021-1475 Heap-buffer-overflow in derive_spatial_luma_vector_prediction
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40107 Crash type: Heap-buffer-overflow READ 1 Crash state: derivespatiallumavectorprediction filllumamotionvectorpredictors motionvectorsandrefindices...
Vulnerabilities fixed in Oracle Database Server
Oracle has fixed vulnerabilities in the following products: Database - Enterprise Edition Spatial and Graph Application Express APEX Engineered Systems Utilities The vulnerabilities potentially enable a malicious party to execute attacks that result in the following categories of damage:...
May 25, 2021—KB5003214 (OS Builds 19041.1023, 19042.1023, and 19043.1023) Preview
None None...
The vulnerability of the Informix Spatial DataBlade module of the IBM Informix Dynamic Server (IDS) database management system allows attackers to enhance their privileges.
The vulnerability of the Informix Spatial DataBlade module of the IBM Informix Dynamic Server IDS database management system lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to increase their privileges...
November 19, 2020—KB4586819 (OS Builds 18362.1237 and 18363.1237) Preview
None None...
IBM Maximo Spatial Asset Management Web Local Storage Vulnerability
IBM Maximo Spatial Asset Management is used to visually manage the spatial relationships between assets and other mapped elements. A web page local storage vulnerability exists in IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0. An attacker could exploit the vulnerabili...
IBM Maximo Spatial Asset Management Cross-Site Request Forgery Vulnerability
IBM Maximo Spatial Asset Management is used to visually manage spatial relationships between assets and other mapped elements. A cross-site request forgery vulnerability exists in IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, 7.6.1.0. An attacker could exploit this vulnerability ...
CVE-2020-4651
IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186024...
