CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11494 matches found

RedHat Linux•added 2023/07/20 12:12 p.m.•13 views

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6,...

3.7CVSS7.2AI score0.01469EPSS

SaveExploits0References4

RedHat Linux•added 2023/07/20 12:11 p.m.•9 views

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

3.7CVSS7.2AI score0.01469EPSS

SaveExploits0References4

RedHat Linux•added 2023/07/20 12:11 p.m.•13 views

OpenJDK: HTTP client insufficient file name validation (8302475)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle...

3.1CVSS7.3AI score0.00948EPSS

SaveExploits0References4

BDU FSTEC•added 2023/07/20 12:00 a.m.•13 views

The vulnerability of the Application Express Customers Plugin component in the Oracle Application Express development environment allows a attacker to read data and modify it.

The vulnerability of the Application Express Customers Plugin component in the Oracle Application Express development environment exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delet...

9CVSS7.7AI score0.00611EPSS

SaveExploits0References2Affected Software1

BDU FSTEC•added 2023/07/20 12:00 a.m.•14 views

The vulnerability of the iSurvey Module component of the software for creating and processing scenarios in Oracle Scripting of the Oracle E-Business Suite allows a perpetrator to gain access to read data and modify it.

The vulnerability of the iSurvey Module component of the software for creating and processing scenarios in Oracle Scripting, a system for automating business activities within the Oracle E-Business Suite, exists due to insufficient verification of input data. Exploiting this vulnerability can all...

6.4CVSS6.8AI score0.0042EPSS

SaveExploits0References2Affected Software2

BDU FSTEC•added 2023/07/20 12:00 a.m.•17 views

The vulnerability of the Unified Audit component of the Oracle Database Server system allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Unified Audit component of the Oracle Database Server management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to read, modify, add, or delete data...

5.7CVSS6.5AI score0.00497EPSS

SaveExploits0References2Affected Software1

RedHat Linux•added 2023/07/19 5:29 p.m.•12 views

OpenJDK: HTTP client insufficient file name validation (8302475)

3.1CVSS7.3AI score0.00948EPSS

SaveExploits0References4

RedHat Linux•added 2023/07/19 5:28 p.m.•8 views

OpenJDK: HTTP client insufficient file name validation (8302475)

3.1CVSS7.3AI score0.00948EPSS

SaveExploits0References4

RedHat Linux•added 2023/07/19 5:28 p.m.•11 views

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

3.7CVSS7.2AI score0.01469EPSS

SaveExploits0References4

RedHat Linux•added 2023/07/19 5:28 p.m.•14 views

OpenJDK: HTTP client insufficient file name validation (8302475)

3.1CVSS7.3AI score0.00948EPSS

SaveExploits0References4

RedHat Linux•added 2023/07/19 5:27 p.m.•12 views

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

3.7CVSS7.2AI score0.01469EPSS

SaveExploits0References4

RedHat Linux•added 2023/07/19 5:27 p.m.•15 views

OpenJDK: HTTP client insufficient file name validation (8302475)

3.1CVSS7.3AI score0.00948EPSS

SaveExploits0References4

RedHat Linux•added 2023/07/19 5:27 p.m.•11 views

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

3.7CVSS7.2AI score0.01469EPSS

SaveExploits0References4

RedHat Linux•added 2023/07/19 5:24 p.m.•13 views

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

3.7CVSS7.2AI score0.01469EPSS

SaveExploits0References4

RedHat Linux•added 2023/07/19 5:24 p.m.•18 views

OpenJDK: HTTP client insufficient file name validation (8302475)

3.1CVSS7.3AI score0.00948EPSS

SaveExploits0References4

RedHat Linux•added 2023/07/19 5:23 p.m.•14 views

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)

3.7CVSS7.2AI score0.01469EPSS

SaveExploits0References4

OSV•added 2023/07/18 9:15 p.m.•15 views

CVE-2023-22055

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime SEC. Supported versions that are affected are Prior to 9.2.7.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

6.1CVSS7.3AI score0.00374EPSS

SaveExploits0References1

OSV•added 2023/07/18 9:15 p.m.•8 views

CVE-2023-22060

Vulnerability in the Oracle Hyperion Workspace product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.2.13.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Workspace...

7.6CVSS7.3AI score0.0055EPSS

SaveExploits0References1

OSV•added 2023/07/18 9:15 p.m.•4 views

DEBIAN-CVE-2023-22043

Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u371. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability...

5.9CVSS5.8AI score0.01135EPSS

SaveExploits0References1

OSV•added 2023/07/18 9:15 p.m.•4 views

DEBIAN-CVE-2023-22049

3.7CVSS5.9AI score0.01469EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by