Lucene search
+L

9216 matches found

CNVD
CNVD
added 2015/04/23 12:0 a.m.7 views

Oracle Commerce Platform A vulnerability exists in the Commerce Platform component

Oracle Commerce Platform is the United States Oracle Oracle company's set of e-business solutions platform. A security vulnerability exists in the Dynamo Application Framework - HTML Admin User Interface subcomponent of the Oracle Commerce Platform component of Oracle Commerce Platform. A remote...

4.3CVSS6.7AI score0.01501EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2015/04/22 12:0 a.m.35 views

Ubuntu: Security Advisory (USN-2573-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.2AI score0.06408EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/04/22 12:0 a.m.38 views

Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-2573-1)

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2015-0460, CVE-2015-0469 Alexander Cherepanov discovered that...

10CVSS5.7AI score0.06408EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2015/04/22 12:0 a.m.49 views

Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-2574-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2574-1 advisory. Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit...

10CVSS5.7AI score0.06408EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2015/04/22 12:0 a.m.38 views

Ubuntu: Security Advisory (USN-2574-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.2AI score0.06408EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2015/04/21 1:5 p.m.74 views

USN-2574-1: OpenJDK 7 vulnerabilities

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2015-0460, CVE-2015-0469 Alexander Cherepanov discovered that...

10CVSS5.7AI score0.06408EPSS
SaveExploits0
OSV
OSV
added 2015/04/21 1:5 p.m.8 views

USN-2574-1 openjdk-7 vulnerabilities

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2015-0460, CVE-2015-0469 Alexander Cherepanov discovered that...

10CVSS6.1AI score0.06408EPSS
SaveExploits0References7
Ubuntu
Ubuntu
added 2015/04/21 1:3 p.m.75 views

USN-2573-1: OpenJDK 6 vulnerabilities

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2015-0460, CVE-2015-0469 Alexander Cherepanov discovered that...

10CVSS5.7AI score0.06408EPSS
SaveExploits0
CNVD
CNVD
added 2015/04/19 12:0 a.m.6 views

Oracle Support Tools SQL Trace Analyzer Component Remote Vulnerability

Oracle Support Tools is a set of Oracle Support Tools. SQL Trace Analyzer is one of the SQL trace analyzer components. A security vulnerability exists in the Create Session subcomponent of the SQL Trace Analyzer component of Oracle Support Tools, which can be exploited by remote attackers to...

5.5CVSS7.4AI score0.01405EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/17 12:0 a.m.6 views

Unspecified Vulnerability in Oracle Fusion Middleware WebCenter Portal Component (CNVD-2015-02540)

Oracle Fusion Middleware is Oracle's suite of business innovation platforms for enterprise and cloud environments, of which Oracle WebCenter Portal is a component that seamlessly integrates portals with enterprise applications. A security vulnerability exists in the Portlet Services subcomponent ...

4.3CVSS6.8AI score0.01529EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/17 12:0 a.m.5 views

Unspecified Vulnerability in Oracle Fusion Middleware WebCenter Portal Component (CNVD-2015-02539)

Oracle Fusion Middleware is Oracle's suite of business innovation platforms for enterprise and cloud environments, of which Oracle WebCenter Portal is a component that seamlessly integrates portals with enterprise applications. A security vulnerability exists in the WebCenter Spaces Application...

4.3CVSS6.8AI score0.01498EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/04/17 12:0 a.m.8 views

Unspecified Vulnerability in Oracle Fusion Middleware WebLogic Server Component

Oracle WebLogic Server is an Oracle Oracle application server for cloud and traditional environments, which provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application deployment and...

5CVSS6.7AI score0.01897EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2015/04/16 4:13 p.m.10 views

wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property

It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request...

5CVSS6.7AI score0.07543EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2015/04/16 3:39 p.m.10 views

wss4j: Apache WSS4J doesn't correctly enforce the requireSignedEncryptedDataElements property

It was found that Apache WSS4J permitted bypass of the requireSignedEncryptedDataElements configuration property via XML Signature wrapping attacks. A remote attacker could use this flaw to modify the contents of a signed request...

5CVSS6.7AI score0.07543EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2015/04/10 12:0 a.m.25 views

Google Android Operating System < 5.0.0 Multiple Vulnerabilities

Binary data 8665.prm...

7.2CVSS5.6AI score0.24534EPSS
SaveExploits9References8
ThreatPost
ThreatPost
added 2015/04/07 10:27 a.m.12 views

Vulnerability Forces Mozilla to Disable Opportunistic Encryption in Firefox

Less than a week after introducing the new opportunistic encryption feature in Firefox, Mozilla has had to disable it because of a security vulnerability in the browser’s implementation of the HTTP Alternative Services specification. The bug puts a kink in the new feature, which was designed to...

0.4AI score
SaveExploits0References3
OSV
OSV
added 2015/01/28 2:9 a.m.3 views

USN-2487-1 openjdk-7 vulnerabilities

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2014-3566, CVE-2014-6587, CVE-2014-6601, CVE-2015-0395,...

10CVSS6.7AI score0.99999EPSS
SaveExploits13References15
Ubuntu
Ubuntu
added 2015/01/28 2:9 a.m.71 views

USN-2487-1: OpenJDK 7 vulnerabilities

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2014-3566, CVE-2014-6587, CVE-2014-6601, CVE-2015-0395,...

10CVSS6.5AI score0.99999EPSS
SaveExploits13
OpenVAS
OpenVAS
added 2015/01/28 12:0 a.m.56 views

Ubuntu: Security Advisory (USN-2486-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.6AI score0.99999EPSS
SaveExploits13References2
Tenable Nessus
Tenable Nessus
added 2015/01/28 12:0 a.m.283 views

Ubuntu 14.04 LTS : OpenJDK 7 vulnerabilities (USN-2487-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2487-1 advisory. Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit...

10CVSS6.6AI score0.99999EPSS
SaveExploits13References15
Rows per page
Query Builder