Lucene search
+L

116 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/01/03 6:13 a.m.•8 views

Malicious code in mw-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab85f947099773c7e6dd5b4c3abd115db9beee7e407c87916ef282f8992ac845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/07 12:00 a.m.•14 views

PT-2023-9573 · Oracle · Oracle E-Business Suite

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to weaknesses in the authorization mechanism of the Common Components component in Oracle Financials, part of the Oracle E-Business Suite. This can allo...

8.5CVSS8.2AI score0.00446EPSS
SaveExploits0References8
NCSC
NCSC
•added 2022/10/19 12:00 a.m.•19 views

Vulnerabilities fixed in Oracle PeopleSoft

Vulnerabilities have been fixed in Oracle PeopleSoft. The vulnerabilities allow a malicious party to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data Oracle has fixed vulnerabilities in the following products:...

8.1CVSS6.5AI score0.1223EPSS
SaveExploits1
NVD
NVD
•added 2022/10/18 9:15 p.m.•24 views

CVE-2022-39406

Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft component: Approval Framework. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

8.1CVSS0.00702EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/18 9:15 p.m.•18 views

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft component: Approval Framework. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

5.5CVSS8.1AI score0.00702EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/10/18 12:00 a.m.•15 views

CVE-2022-39406

Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft component: Approval Framework. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

8.1CVSS6.9AI score0.00702EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/10/18 12:00 a.m.•36 views

CVE-2022-39406

Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft component: Approval Framework. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

8.1CVSS8.3AI score0.00702EPSS
SaveExploits0References1
CVE
CVE
•added 2022/10/18 12:00 a.m.•64 views

CVE-2022-39406

CVE-2022-39406 affects Oracle PeopleSoft 9.2, specifically the Approval Framework in PeopleSoft Enterprise Common Components. The vulnerability is exploitable by a low-privileged attacker over a network via HTTP and can lead to unauthorized creation, deletion, or modification of data, with high c...

8.1CVSS8.1AI score0.00702EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/10/18 12:00 a.m.•12 views

Oracle PeopleSoft Enterprise Common Components 安全漏洞

Oracle PeopleSoft Enterprise Common Components are a set of public components from Oracle Corporation USA. A security vulnerability exists in Oracle PeopleSoft Enterprise Common Components. A low-privileged attacker with network access via HTTP could compromise the PeopleSoft Enterprise Common...

8.1CVSS8.1AI score0.00702EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/23 12:00 a.m.•5 views

CVE-2019-2779: Undefined Security Weakness

Vulnerability in the Siebel Core - Common Components component of Oracle Siebel CRM subcomponent: Email. Supported versions that are affected are 19.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel Core - Common...

4.9CVSS5.7AI score0.01248EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/07/19 12:00 a.m.•13 views

Oracle Siebel CRM Siebel Core - Common Components Component Access Control Error Vulnerability

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions. The solution includes sales management, marketing management, customer service systems, call center modules.Siebel Core - Common Components is one of the Siebel Common Components. A...

4.9CVSS6.9AI score0.01248EPSS
SaveExploits0References1
OSV
OSV
•added 2019/04/10 8:29 p.m.•11 views

CVE-2019-6556

When processing project files, the application Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the...

6.6CVSS6.7AI score0.01152EPSS
SaveExploits0References2
Prion
Prion
•added 2019/04/10 8:29 p.m.•19 views

Code injection

When processing project files, the application Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the...

6.8CVSS6.6AI score0.01152EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2019/04/10 7:48 p.m.•40 views

CVE-2019-6556

When processing project files, the application Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the...

6.6AI score0.01152EPSS
SaveExploits0References2
ICS
ICS
•added 2019/04/04 12:00 a.m.•88 views

Omron CX-Programmer

1. EXECUTIVE SUMMARY CVSS v3 6.6 ATTENTION: Low skill level to exploit Vendor: Omron Equipment: CX-Programmer within CX-One Vulnerability: Use After Free 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the...

6.8CVSS6.9AI score0.01152EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2016/07/21 10:00 a.m.•22 views

CVE-2016-5459

Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect integrity via vectors related to iHelp...

6.2AI score0.01918EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/21 12:00 a.m.•5 views

CVE-2016-5459: Undefined Security Weakness

Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote attackers to affect integrity via vectors related to iHelp...

4.7CVSS6.2AI score0.01918EPSS
SaveExploits0References1
NVD
NVD
•added 2016/04/21 10:59 a.m.•22 views

CVE-2016-0674

Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality and integrity via vectors related to Email...

4.4CVSS3.6AI score0.00314EPSS
SaveExploits0References2
Prion
Prion
•added 2016/04/21 10:59 a.m.•24 views

Code injection

Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows local users to affect confidentiality and integrity via vectors related to Email...

3.2CVSS5.7AI score0.00314EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2016/04/21 10:00 a.m.•50 views

CVE-2016-0674

The CVE-2016-0674 entry relates to Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Core – Common Components (Email) vulnerability. The connected Nessus/CPU references indicate two related issues in 8.1.1/8.2.2: (1) Siebel UI Framework (UIF Open UI) and (2) Siebel Core – Common Componen...

4.4CVSS4.5AI score0.00314EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder