Approved changes feed: RSS · Atom

cpe:2.3:a:navicat:navicat_for_oracle:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNavicat (592c52f8-acc9-5cdf-9629-4c6d6703c2dc)
ProductNavicat For Oracle (0dc0c653-aed5-5d61-ab51-e3d34fda3d7e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25653 vulnerable 2026-06-08 05:13:42.717587 Navicat for Oracle 12.1.15 Password Field Denial of Service
MEDIUM (6.2)
Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the password field. Attackers can paste a buffer of 550 repeated characters into the password parameter during Oracle connection configuration to trigger an application crash.
Published: 2026-03-30T11:02:27.002Z
Updated: 2026-03-30T13:53:07.017Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.