157 matches found
Design/Logic Flaw
D-Link DSL 2730-U IN1.10 and IN1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses and also offer Internet services such as HTTP for names that otherwise would have had an NXDOMAIN erro...
CVE-2020-13960
D-Link DSL 2730-U IN1.10 and IN1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses and also offer Internet services such as HTTP for names that otherwise would have had an NXDOMAIN erro...
CVE-2020-13960: Undefined Security Weakness
D-Link DSL 2730-U IN1.10 and IN1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses and also offer Internet services such as HTTP for names that otherwise would have had an NXDOMAIN erro...
PT-2020-13803
Name of the Vulnerable Software and Affected Versions D-Link DSL 2730-U versions IN 1.10 through IN 1.11 D-Link DIR-600M version 3.04 Description The issue allows remote attackers to provide valid DNS responses for names that would have otherwise resulted in an NXDOMAIN error. This is possible by...
CVE-2020-2730
Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications component: File Upload. Supported versions that are affected are 2.7.0.0, 2.7.0.1 and 2.8.0.0. Easily exploitable vulnerability allows low privileged attacker with netwo...
CVE-2020-2730
Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications component: File Upload. Supported versions that are affected are 2.7.0.0, 2.7.0.1 and 2.8.0.0. Easily exploitable vulnerability allows low privileged attacker with netwo...
CVE-2020-2730
CVE-2020-2730 affects Oracle Financial Services Revenue Management and Billing (ORMB) within Oracle Financial Services Applications, specifically the File Upload component. Affected versions: 2.7.0.0, 2.7.0.1, 2.8.0.0. The vulnerability allows a low-privileged attacker with network access over HT...
RHEL 6 : kernel-rt (RHSA-2019:2730)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2730 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
Oracle MySQL Server <= 5.6.44 / 5.7 <= 5.7.18 Security Update (cpujul2019) - Linux
Oracle MySQL Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
Privilege Escalation
An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...
Design/Logic Flaw
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple...
Security Bulletin: A vulnerability in Network Security Services (NSS) affects the IBM FlashSystem model V9000 (CVE-2015-2730)
Summary There is a vulnerability in Network Security Services NSS to which the IBM® FlashSystem™ V9000 is susceptible. An exploit of this vulnerability could allow a remote attacker to gain unauthorized access to forge signatures. Vulnerability Details CVEID: CVE-2015-2730 DESCRIPTION: Mozilla...
Security Bulletin: A vulnerability in Network Security Services (NSS) affects the IBM FlashSystem model V840 (CVE-2015-2730)
Summary There is a vulnerability in Network Security Services NSS to which the IBM® FlashSystem™ V840 is susceptible. An exploit of this vulnerability could allow a remote attacker could exploit this vulnerability to forge signatures. Vulnerability Details CVEID: CVE-2015-2730 DESCRIPTION: Mozill...
Security Bulletin: Using Components with Known Vulnerabilities affects IBM Security Guardium (multiple CVEs)
Summary IBM Security Guardium is vulnerable to several possible remote attacks Vulnerability Details CVEID: CVE-2015-4881 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the CORBA component has complete confidentiality impact, complete integrity impact, and complete...
Security Bulletin: A vulnerability in nss-softokn affects IBM Security Access Manager for Web (CVE-2015-2730)
Summary Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. IBM Security Access Manager for Web is affected by a vulnerability in the nss-softokn package. Vulnerability Details CVEID: CVE-2015-2730...
CVE-2018-2730
CVE-2018-2730 impacts the Oracle Retail Merchandising System (Cross Pillar) in Oracle Retail Applications, affected version 16.0. The connected documents describe an easily exploitable vulnerability where a low privileged attacker can access the system over HTTP to perform unauthorized updates, i...
CVE-2017-2730
HUAWEI HiLink APP for IOS versions earlier before 5.0.25.306 and HUAWEI Tech Support APP for IOS versions earlier before 5.0.0 have an information leak vulnerability. When an iPhone with these APPs installed access the Wi-Fi hotpot built by attacker, the attacker can collect the information of...
CVE-2016-2730
This CVE entry is rejected/not used; it does not represent an active vulnerability.
F5 Networks BIG-IP : Mozilla NSS vulnerability (K15955144)
Mozilla Network Security Services NSS before 3.19.1, as used in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and other products, does not properly perform Elliptical Curve Cryptography ECC multiplications, which makes it easier for remote attackers to spoof ECDS...