Lucene search
+L

3307 matches found

OSV
OSV
added 2019/02/04 9:29 p.m.2 views

DEBIAN-CVE-2019-1000021

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

7.5CVSS6.8AI score0.02112EPSS
SaveExploits1References1
OSV
OSV
added 2019/02/04 9:29 p.m.8 views

UBUNTU-CVE-2019-1000021

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

7.5CVSS7.1AI score0.02112EPSS
SaveExploits1References4
OSV
OSV
added 2019/02/01 6:29 p.m.12 views

CVE-2018-16483

A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...

8.8CVSS5.8AI score0.01096EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:00 a.m.14 views

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a malicious actor to gain unauthorized access to data or cause service failures.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data or cause service failures using the HTTP protocol...

7.1CVSS7.1AI score0.01841EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:00 a.m.11 views

The vulnerability of the Outside In Filters component of Oracle’s software development kit (SDK) allows a malicious individual to gain unauthorized access to data.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to data using the HTTP protocol...

7.1CVSS7.1AI score0.01603EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:00 a.m.15 views

The vulnerability of the Outside In Filters component of Oracle’s software development kit (SDK) allows a malicious individual to gain unauthorized access to data.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to data using the HTTP protocol...

7.1CVSS7.1AI score0.01571EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:00 a.m.12 views

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a malicious actor to gain unauthorized access to data or cause service failures.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data or cause service failures using the HTTP protocol...

7.1CVSS7.1AI score0.01841EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:00 a.m.11 views

The vulnerability of the Outside In Filters component (ODA Module) within the Oracle Outside In Technology software development kit (SDK). This component allows a malicious individual to gain unauthorized access to data or cause service failures.

The vulnerability of the Outside In Filters component ODA Module within the Oracle Outside In Technology software development kit SDK is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data or cause service...

8.5CVSS7.5AI score0.01991EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:00 a.m.12 views

The vulnerability of the “Outside In” component in the software development kit (SDK) of “Outside In Technology” allows a hacker to trigger a service failure.

The vulnerability of the “Outside In” component in the software development kit SDK related to Outside In Technology is linked to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP protocol...

6.5CVSS6.8AI score0.01825EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:00 a.m.11 views

The vulnerability of the Advanced UI interface of Oracle WebCenter Sites applications allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Advanced UI interface of Oracle WebCenter Sites for online user services is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

6.9CVSS7AI score0.03797EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:00 a.m.11 views

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a malicious actor to gain unauthorized access to data or cause service failures.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data or cause service failures using the HTTP protocol...

7.1CVSS7.1AI score0.01841EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:00 a.m.28 views

The vulnerability of the Core Components of the identity management application for Oracle Identity Analytics allows a perpetrator to gain unauthorized access to data.

The vulnerability of the Core Components of the Oracle Identity Analytics application management application is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to data using the HTTP protocol...

7.1CVSS7.2AI score0.01303EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:00 a.m.15 views

The vulnerability of the Partner Dashboard sub-component of the Oracle Partner Management component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Partner Dashboard sub-component of the Oracle Partner Management component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to modify, add, or delete data using th...

8.2CVSS7.5AI score0.01953EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:00 a.m.11 views

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a hacker to gain full control over the application.

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP...

7.6CVSS7.2AI score0.01342EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:00 a.m.11 views

The vulnerability of the “Outside In” component in Oracle’s software development kit (SDK) allows a hacker to trigger a service failure.

The vulnerability of the Outside component in Oracle’s software development kit SDK is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause a service failure using the HTTP protocol...

7.8CVSS7.2AI score0.01919EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:00 a.m.16 views

The vulnerability of the Outcome-Result sub-component of the Oracle Customer Interaction History component in the Oracle E-Business Suite system allows a malicious user to access, modify, add, or delete data.

The vulnerability of the Outcome-Result sub-component of the Oracle Customer Interaction History component in the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

8.2CVSS7.5AI score0.01913EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:00 a.m.16 views

The vulnerability in the web interface of the Oracle iStore component of the Oracle E-Business Suite, a system for automating business operations, allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the web interface of the Oracle iStore component in the Oracle E-Business Suite system for automating business operations is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify,...

8.2CVSS7.5AI score0.01953EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:00 a.m.18 views

Vulnerability of the sub-component’s overview page/report rendering in the Oracle E-Business Intelligence component of the Oracle E-Business Suite. This component is used for automating business processes within enterprises. It allows attackers to gain access to modify, add, or delete data.

The vulnerability of the sub-component’s overview page/report rendering in Oracle E-Business Intelligence, a system for automating business processes within the Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating...

8.2CVSS7.5AI score0.01953EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:00 a.m.11 views

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data usin...

8.5CVSS7.5AI score0.01388EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2019/01/23 12:00 a.m.15 views

PT-2019-3931 · Apache +3 · Apache Http Server +3

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.37 through 2.4.38 Description: The issue is related to a flaw in the mod ssl component of the Apache HTTP Server, specifically concerning inadequate access control. This flaw can be exploited by a remote attack...

9CVSS6.7AI score0.65005EPSS
SaveExploits9References83
Rows per page
Query Builder