Lucene search
+L

11543 matches found

BDU FSTEC
BDU FSTEC
added 2020/10/14 12:00 a.m.24 views

The vulnerability of the Application Express component of the Oracle Database Server system allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Application Express component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, add, or delete access to data...

5.5CVSS6.2AI score0.0074EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2020/10/12 12:00 a.m.16 views

Mediatek MT7620N Authentication Bypass Vulnerability

The Mediatek MT7620N is an IEEE802.11n on-chip routing chip from China's MediaTek. An authentication bypass vulnerability exists on the Mediatek MT7620N 1.06 device, which can be exploited by an attacker to identify information or potentially modify data...

6.1CVSS6.8AI score0.00751EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/10/05 3:18 p.m.10 views

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructu...

5.1CVSS6.8AI score0.0079EPSS
SaveExploits0References5
NVD
NVD
added 2020/09/30 6:15 p.m.17 views

CVE-2019-18991

A partial authentication bypass vulnerability exists on Atheros AR9132 3.60AMX.8, AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sen...

6.1CVSS0.0046EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/30 6:15 p.m.9 views

CVE-2019-18989

A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which wou...

5.4CVSS6.3AI score0.00751EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/30 6:15 p.m.12 views

CVE-2019-18991

A partial authentication bypass vulnerability exists on Atheros AR9132 3.60AMX.8, AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sen...

5.4CVSS5.8AI score0.0046EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/30 6:15 p.m.30 views

CVE-2019-18990

A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a...

6.1CVSS0.00751EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/09/30 6:15 p.m.8 views

CVE-2019-18990

A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a...

6.1CVSS6AI score0.00751EPSS
SaveExploits0References2
Prion
Prion
added 2020/09/30 6:15 p.m.26 views

Authentication flaw

A partial authentication bypass vulnerability exists on Atheros AR9132 3.60AMX.8, AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sen...

4.8CVSS5.4AI score0.0046EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2020/09/30 5:22 p.m.23 views

CVE-2019-18989

A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which wou...

6.1CVSS5.4AI score0.00751EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/09/24 12:00 a.m.9 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages arises from insufficient validation of input data, allowing unauthorized access to data modifications.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to and modify data...

4.3CVSS6.8AI score0.01807EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2020/09/24 12:00 a.m.14 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages arises from insufficient validation of input data, allowing unauthorized access to data modifications.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to and modify data remotely...

4.3CVSS7.6AI score0.02217EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2020/09/18 12:00 a.m.8 views

The vulnerability of the Popups component of the Oracle Applications Framework software platform allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Popups component in the Oracle Applications Framework exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized access to protected information...

8.5CVSS7.7AI score0.01432EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/18 12:00 a.m.8 views

The vulnerability of the Security component of the Oracle AutoVue data visualization application allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Security component of the Oracle AutoVue data visualization application is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

4.3CVSS6.4AI score0.00812EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/18 12:00 a.m.9 views

Vulnerability of the MySQL Server component: The Pluggable Auth feature of the MySQL database management system allows attackers to gain access to modify, add, or delete data.

The vulnerability of the MySQL Server component, the Pluggable Auth system for database management, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data using the MySQL Protocol...

4.3CVSS6.5AI score0.01956EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/09/18 12:00 a.m.13 views

The vulnerability of the Diagnostics sub-component of the Oracle Application Object Library in the Oracle E-Business Suite system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Diagnostics sub-component of the Oracle Application Object Library in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data using the HTTP...

4.7CVSS6.5AI score0.00985EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/18 12:00 a.m.8 views

The vulnerability of the Workbench search system of Oracle Commerce Guided Search and the Oracle Commerce Experience Manager, a tool for managing the user environment, allows an attacker to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Workbench search engine component of Oracle Commerce Guided Search and the Oracle Commerce Experience Manager user environment management tool exists due to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to...

7.4CVSS7.3AI score0.01596EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/09/18 12:00 a.m.11 views

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain access to the ability to modify, add, or delete data...

4.9CVSS6.5AI score0.008EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/18 12:00 a.m.12 views

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite system allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to access and modify, add, or delete data...

4.7CVSS6.4AI score0.00985EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:00 a.m.34 views

The vulnerability of the sub-component of the Dynamo Application Framework within the component of the Oracle Commerce Platform of the e-commerce platform Oracle Commerce allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the sub-component of the Dynamo Application Framework within the Oracle Commerce Platform of the e-commerce platform Oracle Commerce exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to remotely access and modify,...

5CVSS6.5AI score0.01048EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder