Lucene search
+L

145 matches found

Circl
Circl
added 2023/06/14 10:20 p.m.9 views

CVE-2023-2976

creationtimestamp| type| source ---|---|--- 2023-06-14 22:20:59+00:00| seen| https://t.me/cibsecurity/65240 2024-02-07 11:41:33+00:00| seen| https://t.me/ctinow/180642 2024-02-07 11:41:34+00:00| seen| https://t.me/ctinow/180643 2024-02-07 12:11:50+00:00| seen| https://t.me/ctinow/180655 2024-02-0...

7.1CVSS6.7AI score0.00248EPSS
SaveExploits0References20
Wolfi
Wolfi
added 2023/06/14 6:15 p.m.60 views

CVE-2023-2976 vulnerabilities

Vulnerabilities for packages: celeborn, spdx-tools-java, trino, cassandra-reaper, maven-stage0, gradle...

7.1CVSS6.7AI score0.00248EPSS
SaveExploits0
Chainguard
Chainguard
added 2023/06/14 6:15 p.m.120 views

CVE-2023-2976 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, celeborn, trino, hadoop-client-modules, spark-fips, maven-stage0, hadoop-fips, spdx-tools-java, gradle...

7.1CVSS6.7AI score0.00248EPSS
SaveExploits0
OSV
OSV
added 2023/06/14 6:15 p.m.9 views

AZL-27173 CVE-2023-2976 affecting package guava for versions less than 25.0-8

Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files...

7.1CVSS6.6AI score0.00248EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/14 6:15 p.m.8 views

UBUNTU-CVE-2023-2976

Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files...

7.1CVSS6.7AI score0.00248EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2023/06/14 6:15 p.m.109 views

CVE-2023-2976

Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files...

7.1CVSS6.7AI score0.00248EPSS
SaveExploits0References3
CVE
CVE
added 2023/06/14 5:36 p.m.978 views

CVE-2023-2976

The CVE-2023-2976 issue affects Google Guava’s FileBackedOutputStream in versions 1.0–31.1, where files created in the default Java temporary directory on Unix and Android ICS can be accessed by other users/apps. The NVD notes the vulnerability could expose data with high impact to confidentialit...

7.1CVSS6.1AI score0.00248EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2023/06/14 5:36 p.m.41 views

CVE-2023-2976 Use of temporary directory for file creation in `FileBackedOutputStream` in Guava

Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files...

5.5CVSS7.1AI score0.00248EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 9:06 p.m.55 views

Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.0.0.7

Abstract Cross reference list for security vulnerabilities fixed in IBM WebSphere Application Server Fix Pack 8.0.0.7 Content VULNERABILITY DETAILS: CVE ID:CVE-2013-2967PM78614 DESCRIPTION: WebSphere Application Server could allow a cross-site scripting attack, caused by improper validation of...

3.5CVSS8.3AI score0.35584EPSS
SaveExploits1Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.36 views

SUSE: Security Advisory (SUSE-SU-2016:2976-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.5AI score0.24299EPSS
SaveExploits17References103
OpenVAS
OpenVAS
added 2021/04/19 12:00 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2019:2976-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.5AI score0.0051EPSS
SaveExploits0References4
OSV
OSV
added 2020/07/15 6:15 p.m.14 views

CVE-2020-2976

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

5.4CVSS6.8AI score0.00688EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/15 6:15 p.m.23 views

CVE-2020-2976

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

5.4CVSS0.00688EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/07/15 5:34 p.m.29 views

CVE-2020-2976

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

5.4CVSS5.3AI score0.00688EPSS
SaveExploits0References1
CVE
CVE
added 2020/07/15 5:34 p.m.64 views

CVE-2020-2976

CVE-2020-2976 affects Oracle Database Server’s Oracle Application Express (APEX) component. Affected versions are 5.1–19.2. The vulnerability allows a low-privileged attacker with SQL Workshop privilege and HTTP network access to compromise APEX. Exploitation requires user interaction and can lea...

5.4CVSS5.1AI score0.00688EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/07/15 5:34 p.m.11 views

CVE-2020-2976

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

5.4CVSS6.2AI score0.00688EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/10/16 5:40 p.m.40 views

CVE-2019-2976

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.1.0-17.12.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

6.8AI score0.01132EPSS
SaveExploits0References1
CVE
CVE
added 2019/10/16 5:40 p.m.80 views

CVE-2019-2976

CVE-2019-2976 affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access. Connected sources confirm vulnerable versions are 17.1.0–17.12.12. The flaw enables a low-privileged attacker with network access via HTTP to compromise P6 EPPM; exploitation is described as ea...

6.8CVSS6.7AI score0.01132EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/07/18 1:29 p.m.25 views

CVE-2018-2976

Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite subcomponent: Networking. The supported version that is affected is 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterpri...

8.2CVSS7.3AI score0.02223EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2018/07/18 1:00 p.m.28 views

CVE-2018-2976

Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite subcomponent: Networking. The supported version that is affected is 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterpri...

6.7AI score0.02223EPSS
SaveExploits0References3
Rows per page
Query Builder