6312 matches found
CVE-2018-2723
CVE-2018-2723 affects Oracle Financial Services Asset Liability Management within Oracle Financial Services Applications (User Interface). Affected are versions 6.1.x and 8.0.x. The flaw allows a low-privilege, network-access attacker (HTTP) to compromise the OLAP AMS UI and cause unauthorized cr...
CVE-2018-2723
Vulnerability in the Oracle Financial Services Asset Liability Management component of Oracle Financial Services Applications subcomponent: User Interface. Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access...
CVE-2018-2692
CVE-2018-2692 affects Oracle Financial Services Asset Liability Management (A LM) UI in Oracle Financial Services Applications. Affected versions are 6.1.x and 8.0.x. The vulnerability permits an unauthenticated attacker with network access via HTTP to compromise the A LM component. Successful at...
CVE-2018-2692
Vulnerability in the Oracle Financial Services Asset Liability Management component of Oracle Financial Services Applications subcomponent: User Interface. Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network acces...
CVE-2018-2723
Vulnerability in the Oracle Financial Services Asset Liability Management component of Oracle Financial Services Applications subcomponent: User Interface. Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access...
IBM Security Access Manager Resource Error Vulnerability
IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. An Asset Error vulnerability exists in IBM Security Access Manager that stems from...
Blender Sequencer imb_bmp_decode Integer Overflow Code Execution Vulnerability
Summary An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .bmp file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...
CVE-2018-5283
The Photos in Wifi application 1.0.1 for iOS has directory traversal via the ext parameter to assets-library://asset/asset.php...
Vulchain Scanner: 5 basic principles
New Year holidays in Russia lasts 10 days this year! Isn't it an excellent opportunity to start a new project? So, I decided to make my own active network vulnerability scanner - Vulchain. Why? Well, first of all, it's fun. You can make the architecture from scratch, see the difficulties invisibl...
Unspecified Open Redirection Vulnerability in IBM Maximo Asset Management
IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A security...
CVE-2017-1558
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...
CVE-2017-1558
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...
Open redirect
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...
CVE-2017-1558
The connected IBM bulletin confirms CVE-2017-1558 affects Maximo Asset Management 7.5 and 7.6 (and related products) via an open redirect that enables remote phishing by spoofing displayed URLs. Impact: user redirection to a malicious site and potential data exposure; CVSS v3.0 base score 6.1 (Ne...
CVE-2017-1558
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...
asset-formation.com XSS vulnerability
Open Bug Bounty ID: OBB-452749 Description| Value ---|--- Affected Website:| asset-formation.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...
Belden Hirschmann Tofino Xenon Security Appliance Firewall Bypass Vulnerability
The Tofino Xenon security appliance is the ideal solution for segmenting control networks into secure zones. A firewall bypass vulnerability exists in the Tofino Xenon security appliance prior to version 03.2.00. The vulnerability is due to a design flaw in the OPC classic and custom netfilter...
Design/Logic Flaw
October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file permissions on the server...
Design/Logic Flaw
October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromise and possibly other applications on the server...