62 matches found
Oracle Reports Developer Component Cross-site Scripting (CVE-2019-2413)
A cross-site scripting vulnerability exists in Oracle Reports component. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Cross-site Scripting XSS Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Version: 12.2.1.3 REQUIRED Tested on: Windows 10 CV...
Oracle Reports Developer 12.2.1.3 Cross Site Scripting
Exploit Title: Cross-site Scripting XSS Date: 2019-01-15 Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Version: 12.2.1.3 REQUIRED Tested on: Windows 10 CVE : CVE-2019-2413 POC:...
Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting
Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting Exploit Title: Cross-site Scripting XSS Date: 2019-01-15 Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Version: 12.2.1.3...
CVE-2019-2413
creationtimestamp| type| source ---|---|--- 2019-01-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46187...
Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting
Exploit Title: Cross-site Scripting XSS Date: 2019-01-15 Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Version: 12.2.1.3 REQUIRED Tested on: Windows 10 CVE : CVE-2019-2413 POC:...
CVE-2019-2413
CVE-2019-2413 affects Oracle Fusion Middleware’s Oracle Reports Developer component (subcomponent: Valid Session) in version 12.2.1.3. The flaw allows an unauthenticated attacker with network access over HTTP to compromise Oracle Reports Developer, with human interaction required for exploitation...
CVE-2018-2413
CVE-2018-2413 affects SAP Disclosure Management 10.1. The issue is an authorization check omission for authenticated users, leading to privilege escalation. Impact details are described in NVD/SAP CNVD entries, with CVSS metrics cited (high in 3.0 vector, but base CNA score lower). Affected compo...
CVE-2009-2413
CVE-2009-2413 is rejected and does not represent an active vulnerability entry.
CVE-2017-2413
CVE-2017-2413 affects macOS
CVE-2016-2413
CVE-2016-2413 affects Android mediaserver: media/libmedia/IOMX.cpp in mediaserver does not initialize a handle pointer. This vulnerability enables a local attacker to gain privileges via a crafted application, demonstrated by obtaining Signature or SignatureOrSystem access. Affected Android versi...
Oracle: Security Advisory (ELSA-2014-0406)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2014-327)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (3076321)
This host is missing a critical security update according to Microsoft Bulletin MS15-065. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2015-2413
CVE-2015-2413 affects Microsoft Internet Explorer 6–11. A remote attacker can determine the existence of local files via a crafted module-resource request, an information-disclosure vulnerability arising from how IE handles certain module-resource requests. The public description confirms IE info...
KLA10634 Multiple vulnerabilities in Microsoft Internet Explorer
Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to read local files, cause denial of service, bypass security restrictions, execute arbitrary code, gain privileges or obtain sensitive information. Below is a comple...
Ubuntu 14.04 LTS : AppArmor vulnerability (USN-2413-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2413-1 advisory. An AppArmor policy miscompilation flaw was discovered in apparmorparser. Under certain circumstances, a malicious application could use this flaw to perform...
CVE-2012-2413
The CVE-2012-2413 issue affects Joomla! 1.5.26 and earlier, specifically the ja_purity template. A reflected XSS can be triggered via the Mod* cookie parameter used in html/modules.php, where user-provided cookie data is echoed without proper encoding. This allows injection of arbitrary web scrip...
Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-2187-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2187-1 advisory. Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit...