Kingkk

The issue is related to the restoration of untrusted data in memory, which can allow a remote attacker to execute arbitrary code. It is also identified as a deserialization issue that was present in Apache Chainsaw, a component of Apache Log4j 1.2.x.

The issue is related to a deserialization flaw in the software, which could allow a remote attacker to execute arbitrary code.

The issue is related to insufficient access controls in the CacheStore component of Oracle Coherence, allowing a remote attacker to cause a denial of service. Successful exploitation can result in the ability to cause a hang or frequently repeatable crash of Oracle Coherence.

The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP, T3 to compromise the server. Successful attacks can result in the takeover of Oracle WebLogic Server, impacting confidentiality, integrity, and availability.

The issue is related to insufficient input validation in the Server: Security: Roles component of MySQL Server, allowing a remote attacker to gain access to modify, add, or delete data and cause a denial of service. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash of MySQL Server, as well as unauthorized update, insert, or delete access to some of MySQL Server's accessible data.

The issue is related to SQL Injection via the `count` parameter. This occurs because the `parseKey` function in the `Library/Think/Db/Driver/Mysql.class.php` file mishandles the `key` variable. It is noted that a backquote character is not required in the attack URI.

The issue is related to SQL Injection via the `count` parameter. This occurs because the library/think/db/Query.php aggregate function mishandles the aggregate variable. The attack requires a backquote character in the attack URI.