Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Navicat for Oracle 12.1.15 Password Field Denial of Service
Vulnerability Description
Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the password field. Attackers can paste a buffer of 550 repeated characters into the password parameter during Oracle connection configuration to trigger an application crash.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
未经验证的口令修改
Vulnerability Title
Navicat 安全漏洞
Vulnerability Description
Navicat是Navicat公司的一款数据库管理工具，旨在提供可视化的用户界面，以便用户更轻松地管理数据库的设计、开发和维护。 Navicat 12.1.15版本存在安全漏洞，该漏洞源于密码字段存在拒绝服务漏洞，可能导致本地攻击者通过输入超长字符串使应用程序崩溃。
CVSS Information
N/A
Vulnerability Type
N/A