Lucene search
+L

352 matches found

CVE
CVE
•added 2020/01/15 4:34 p.m.•77 views

CVE-2020-2569

CVE-2020-2569 concerns the Oracle Database Server, specifically the Oracle Applications DBA component. Affected are Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The vulnerability is described as easily exploitable by a low-privileged attacker who already has Local L...

3.9CVSS3.8AI score0.00324EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/15 12:00 a.m.•2 views

CVE-2020-2568: Undefined Security Weakness

Vulnerability in the Oracle Applications DBA component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Oracle...

5.8CVSS5.9AI score0.00717EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/01/15 12:00 a.m.•13 views

Unspecified Vulnerability in Oracle Database Server (CNVD-2020-09958)

Oracle Database Server is an object-a relational database management system that provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Oracle Applications DBA component in Oracle Database Server 12.1.0.2, 12.2.0.1, 18c, and 19c...

5.8CVSS6.4AI score0.00717EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/15 12:00 a.m.•2 views

CVE-2020-2569: Undefined Security Weakness

Vulnerability in the Oracle Applications DBA component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where...

3.9CVSS5.5AI score0.00324EPSS
SaveExploits0References1
Symantec
Symantec
•added 2020/01/14 12:00 a.m.•65 views

Oracle Database Server CVE-2020-2569 Local Security Vulnerability

Description Oracle Database Server is prone to a local security vulnerability that exists in Oracle Applications DBA. The vulnerability can be exploited over the 'Local Logon' protocol. For an exploit to succeed, the attacker must have 'Local Logon' privilege. This vulnerability affects the...

2.1AI score0.00324EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/01/13 12:00 a.m.•15 views

The vulnerability of the command-line interface of the DBA-1510P router software allows a hacker to execute arbitrary operating system commands.

The vulnerability of the command-line interface of the DBA-1510P router microprogramming system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

6.8CVSS7.3AI score0.00599EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2019/12/26 4:15 p.m.•15 views

CVE-2019-6013

DBA-1510P firmware 1.70b009 and earlier allows authenticated attackers to execute arbitrary OS commands via Command Line Interface CLI...

6.6CVSS7.1AI score0.00599EPSS
SaveExploits0References2
NVD
NVD
•added 2019/12/26 4:15 p.m.•27 views

CVE-2019-6013

DBA-1510P firmware 1.70b009 and earlier allows authenticated attackers to execute arbitrary OS commands via Command Line Interface CLI...

6.8CVSS6.9AI score0.00599EPSS
SaveExploits0References2
NVD
NVD
•added 2019/12/26 4:15 p.m.•29 views

CVE-2019-6014

DBA-1510P firmware 1.70b009 and earlier allows an attacker to execute arbitrary OS commands via Web User Interface...

8.8CVSS9AI score0.01245EPSS
SaveExploits0References2
OSV
OSV
•added 2019/12/26 4:15 p.m.•11 views

CVE-2019-6014

DBA-1510P firmware 1.70b009 and earlier allows an attacker to execute arbitrary OS commands via Web User Interface...

8.8CVSS7.5AI score0.01245EPSS
SaveExploits0References2
Prion
Prion
•added 2019/12/26 4:15 p.m.•21 views

Design/Logic Flaw

DBA-1510P firmware 1.70b009 and earlier allows an attacker to execute arbitrary OS commands via Web User Interface...

8.3CVSS8.9AI score0.01245EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2019/12/26 4:15 p.m.•26 views

Design/Logic Flaw

DBA-1510P firmware 1.70b009 and earlier allows authenticated attackers to execute arbitrary OS commands via Command Line Interface CLI...

6.8CVSS7.5AI score0.00599EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2019/12/26 3:16 p.m.•57 views

CVE-2019-6014

The CVE-2019-6014 vulnerability affects the D-Link DBA-1510P, specifically in the Web User Interface. The root cause is an OS command injection flaw in the Web UI (and related CLI issue for CVE-2019-6013) that allows an attacker to execute arbitrary commands on the device. Impact is execution of ...

8.8CVSS9AI score0.01245EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/12/26 3:16 p.m.•31 views

CVE-2019-6013

DBA-1510P firmware 1.70b009 and earlier allows authenticated attackers to execute arbitrary OS commands via Command Line Interface CLI...

7.5AI score0.00599EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/12/26 3:16 p.m.•34 views

CVE-2019-6014

DBA-1510P firmware 1.70b009 and earlier allows an attacker to execute arbitrary OS commands via Web User Interface...

9.1AI score0.01245EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/26 12:00 a.m.•1 views

CVE-2019-6013: Improper Neutralization of Special Elements used in an OS Command

DBA-1510P firmware 1.70b009 and earlier allows authenticated attackers to execute arbitrary OS commands via Command Line Interface CLI...

6.8CVSS7.3AI score0.00599EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/26 12:00 a.m.•1 views

CVE-2019-6014: Improper Neutralization of Special Elements used in an OS Command

DBA-1510P firmware 1.70b009 and earlier allows an attacker to execute arbitrary OS commands via Web User Interface...

8.8CVSS8.2AI score0.01245EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/12/10 12:00 a.m.•9 views

The vulnerability of the D-Link DBA-1510P network device’s microprogramming software lies in the lack of measures taken to neutralize special elements, allowing a hacker to execute arbitrary commands.

The vulnerability of the microprogrammed network device D-Link DBA-1510P is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

8.8CVSS7.9AI score0.01245EPSS
SaveExploits0References7Affected Software1
CNVD
CNVD
•added 2019/10/07 12:00 a.m.•10 views

D-Link DBA-1510P OS Command Injection Vulnerability

The D-Link DBA-1510P is a wireless access point device from Taiwan, China-based AUO D-Link. An operating system command injection vulnerability exists in the Web User Interface of the D-Link DBA-1510P using firmware version 1.70b009 and earlier, which can be exploited by an attacker to execute...

8.8CVSS8.1AI score0.01245EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/07 12:00 a.m.•19 views

D-Link DBA-1510P OS Command Injection Vulnerability (CNVD-2019-36969)

The D-Link DBA-1510P is a wireless access point device from Taiwan, China-based AUO D-Link. An operating system command injection vulnerability exists in the CLI of D-Link DBA-1510P versions using firmware version 1.70b009 and earlier, which can be exploited by an attacker to execute illegal...

6.8CVSS8AI score0.00599EPSS
SaveExploits0References1
Rows per page
Query Builder