Lucene search
+L

134 matches found

BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.6 views

The vulnerability of the Oracle Text component of the Oracle Database Server system, which arises due to insufficient validation of input data, allows attackers to cause partial service interruptions.

The vulnerability of the Oracle Text component of the Oracle Database Server system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause partial service interruptions using specially crafted network packets...

3.5CVSS6.3AI score0.00939EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2021/01/20 2:50 p.m.30 views

CVE-2021-2045

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle...

3.1CVSS4.5AI score0.00939EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.5 views

The vulnerability of the Oracle Text component of the Oracle Database Server database management system allows a perpetrator to execute arbitrary code.

The vulnerability of the Oracle Text component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.1CVSS8.1AI score0.01721EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:0 a.m.4 views

The vulnerability of the Oracle Text component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Oracle Text component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures using the Oracle Net protocol stack...

6.4CVSS7.8AI score0.00887EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/07/19 12:0 a.m.132 views

Oracle Database Server Multiple Vulnerabilities (Jul 2019 CPU)

The remote Oracle Database Server is missing the July 2019 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - An unspecified vulnerability in the Spatial component of Oracle Database Server, which could allow an authenticated, remote attacker to cause a partial...

9.8CVSS6.4AI score0.04012EPSS
Exploits1References9
CNVD
CNVD
added 2019/07/17 12:0 a.m.6 views

Oracle Database Server Text Component Access Control Error Vulnerability

Oracle Database Server is a set of relational database management system Oracle Oracle. The database management system provides data management, distributed processing and other functions.Core RDBMS is one of the relational database core components.ODBC Driver is one of the open database...

4.9CVSS7.2AI score0.00887EPSS
Exploits0References1
CNVD
CNVD
added 2018/02/06 12:0 a.m.1 views

Stack Overflow Vulnerability in WPS Text

WPS office is an office software suite independently developed by Kingsoft Corporation. WPS text wps.exe in WPS has a stack overflow when parsing a specific docx file, which can be exploited by an attacker to cause a denial of service or code execution...

7.7AI score
Exploits0
CNVD
CNVD
added 2017/07/14 12:0 a.m.3 views

Stack Overflow Vulnerability in WPS

WPS is an office software developed by Kingsoft Office Software. A stack overflow vulnerability exists in WPS text. The vulnerability is due to the program failing to validate the buffer length. An attacker can exploit the vulnerability by constructing a malformed XML file resulting in heap...

7.7AI score
Exploits0
Prion
Prion
added 2011/10/18 10:55 p.m.18 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Text component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability, related to CTXSYS.DRVDISP...

8.5CVSS5.8AI score0.0224EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2009/10/22 6:30 p.m.45 views

CVE-2009-1991

Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle...

3.6CVSS6.5AI score0.01712EPSS
Exploits0References6
NVD
NVD
added 2007/10/17 11:17 p.m.19 views

CVE-2007-5508

Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component CTXDOC in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to execute arbitrary SQL commands via the 1 THEMES, 2 GIST, 3 TOKENS, 4 FILTER, 5 HIGHLIGHT, and 6 MARKUP...

6.5CVSS7.7AI score0.05158EPSS
Exploits0References12
Prion
Prion
added 2007/07/18 7:30 p.m.19 views

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 allow remote authenticated users to have an unknown impact via a the Oracle Text component, including 1 unspecified vectors DB05, 2 CTXSYS.DRVXMD DB06, 3 CTXSYS.DRIMOVECTXSYS DB07, 4 CTXSYS.DRVXMD DB08, and b JavaVM DB14...

6.5CVSS6.3AI score0.03199EPSS
Exploits0References11Affected Software1
NVD
NVD
added 2007/04/18 6:19 p.m.21 views

CVE-2007-2117

Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has unknown impact and attack vectors, aka DB12. NOTE: as of 20070424, Oracle has not disputed reliable claims that this involves a buffer overflow in the ctxsrv server daemon...

6.8CVSS6.7AI score0.00563EPSS
Exploits0References9
Prion
Prion
added 2006/01/18 11:3 a.m.21 views

Sql injection

Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 DB17 in the Oracle Text component and 2 DB18 in the Program Interface Network component. NOTE: details are...

10CVSS7.9AI score0.05274EPSS
Exploits1References15Affected Software1
Rows per page
Query Builder