Lucene search
K

16 matches found

Circl
Circl
added 2026/02/05 5:0 a.m.1 views

CVE-2025-14740

creationtimestamp| type| source ---|---|--- 2026-02-05 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-068/ 2026-02-05 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-067/...

6.7CVSS5AI score0.00008EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:43 p.m.3 views

CVE-2020-14740

Vulnerability in the SQL Developer Install component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows low privileged attacker having Client Computer User Account privilege with logon to the...

2.8CVSS5.2AI score0.00088EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:54 p.m.8 views

CVE-2020-16267

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...

8.8CVSS8AI score0.0232EPSS
Exploits0
OSV
OSV
added 2021/11/15 4:15 p.m.16 views

CVE-2021-34992

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit this vulnerability. The specific flaw exists within Composite.dll. The issue results from the lack of proper validation of user-supplied...

8.8CVSS7.4AI score
Exploits0References2
NVD
NVD
added 2021/11/15 4:15 p.m.11 views

CVE-2021-34992

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit this vulnerability. The specific flaw exists within Composite.dll. The issue results from the lack of proper validation of user-supplied...

8.8CVSS0.21136EPSS
Exploits0References2
Prion
Prion
added 2021/11/15 4:15 p.m.8 views

Deserialization of untrusted data

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit this vulnerability. The specific flaw exists within Composite.dll. The issue results from the lack of proper validation of user-supplied...

6.5CVSS9AI score0.21136EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/15 3:40 p.m.13 views

CVE-2021-34992

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit this vulnerability. The specific flaw exists within Composite.dll. The issue results from the lack of proper validation of user-supplied...

8.8CVSS9.1AI score0.21136EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2021:14740-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4CVSS7.9AI score0.0045EPSS
Exploits1References4
Circl
Circl
added 2020/10/21 7:4 p.m.0 views

CVE-2020-14740

creationtimestamp| type| source ---|---|--- 2020-10-21 19:04:25+00:00| seen| https://t.me/cibsecurity/15470...

2.8CVSS6.9AI score0.00088EPSS
Exploits0References1
CVE
CVE
added 2020/10/21 2:4 p.m.50 views

CVE-2020-14740

CVE-2020-14740 affects Oracle Database Server’s SQL Developer Install component in versions 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. A low-privilege user with Client Computer User Account privileges and logon to the environment can trigger a vulnerability that requires user interaction and can lead ...

2.8CVSS3.3AI score0.00088EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2020/10/06 7:15 p.m.1 views

CVE-2020-16267

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the RCA module...

8.8CVSS5.8AI score0.0232EPSS
Exploits0References3
OSV
OSV
added 2020/10/06 7:15 p.m.0 views

CVE-2020-15927

Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module...

8.8CVSS5.8AI score0.01313EPSS
Exploits0References3
CNVD
CNVD
added 2020/09/28 12:0 a.m.3 views

Zoho ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2020-54780)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...

9.8CVSS8.1AI score0.31375EPSS
Exploits0References1
NVD
NVD
added 2018/07/30 1:29 a.m.10 views

CVE-2018-14740

An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in setfieldone in bootstrap.c while making a query...

7.5CVSS7.5AI score0.0028EPSS
Exploits0References1
CVE
CVE
added 2018/07/29 6:0 p.m.39 views

CVE-2018-14740

CVE-2018-14740 affects the libpbc.a component of cloudwu PBC up to 2017-03-02. A crash (SEGV) can occur in the function set_field_one() inside bootstrap.c when making a query, as described in multiple sources (NVD, CVE listings). CVSS v2 base score 5.0 (MEDIUM) and CVSS v3 base score 7.5 (HIGH) r...

7.5CVSS7.5AI score0.0028EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/04/26 2:0 p.m.49 views

CVE-2017-14740

GeniXCMS 1.1.0 is affected by an XSS vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu. The issue is documented across multiple sources (e.g., CVE-2017-14740 and related advisories) and is not described with a published ...

4.8CVSS4.6AI score0.00171EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder