Lucene search
+L

177 matches found

attackerkb
attackerkb
•added 2021/01/20 3:15 p.m.•11 views

CVE-2021-2102

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7AI score0.01271EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/01/20 3:15 p.m.•12 views

CVE-2021-2104

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7AI score0.01271EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2021/01/20 2:50 p.m.•16 views

CVE-2021-2102

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7.3AI score0.01271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2021/01/20 2:50 p.m.•17 views

CVE-2021-2104

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7.3AI score0.01271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2021/01/20 2:50 p.m.•29 views

CVE-2021-2103

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7.3AI score0.01271EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/01/20 2:50 p.m.•43 views

CVE-2021-2104

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS8.4AI score0.01271EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/20 2:50 p.m.•75 views

CVE-2021-2103

CVE-2021-2103 affects Oracle’s Complex Maintenance, Repair, and Overhaul (dialog box) in Oracle Supply Chain. Affected versions: 11.5.10, 12.1, 12.2. The issue allows an unauthenticated attacker with network access via HTTP to compromise the system; exploitation requires human interaction. Impact...

8.2CVSS8.3AI score0.01271EPSS
SaveExploits0References1Affected Software2
CVE
CVE
•added 2021/01/20 2:50 p.m.•81 views

CVE-2021-2102

The CVE-2021-2102 issue is in Oracle Complex Maintenance, Repair, and Overhaul (Dialog Box) for versions 11.5.10, 12.1, 12.2. It stems from insufficient access control, enabling an unauthenticated, network-accessible attacker (via HTTP) to access or modify data after user interaction. The Red Hat...

8.2CVSS8.3AI score0.01271EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•6 views

CVE-2021-2104: Undefined Security Weakness

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS5.7AI score0.01271EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•6 views

CVE-2021-2103: Undefined Security Weakness

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS5.7AI score0.01271EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•8 views

CVE-2021-2102: Undefined Security Weakness

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS5.7AI score0.01271EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•25 views

Oracle Dialog Box Security Vulnerability

Oracle Dialog Box is the United States Oracle Oracle company can generate a dialog box Windows API functions. This file exists in many Oracle products and provides dialog box support for the products. A security vulnerability exists in Oracle Dialog Box, which arises from unauthorized full access...

8.2CVSS5.8AI score0.01271EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•24 views

Oracle Dialog Box Security Vulnerability

Oracle Dialog Box is the United States Oracle Oracle company can generate a dialog box Windows API functions. This file exists in many Oracle products and provides dialog box support for the products. A security vulnerability exists in Oracle Dialog Box that could allow an unauthenticated attacke...

8.2CVSS7.3AI score0.01271EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•21 views

PT-2021-1774 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 11.5.10, 12.1, and 12.2 Description: The issue is related to insufficient access control in the Dialog Box component of the Oracle Complex Maintenance, Repair, and Overhaul product. It...

8.2CVSS8.6AI score0.01271EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•17 views

PT-2021-1742 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 11.5.10, 12.1, 12.2 Description: The issue is related to insufficient access control in the Dialog Box component of the Oracle Complex Maintenance, Repair, and Overhaul product. This...

8.2CVSS8.7AI score0.01271EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2020/10/02 7:15 p.m.•14 views

CVE-2020-5979

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which a user is presented with a dialog box for input by a high-privilege process, which may lead to escalation of privileges...

7.8CVSS7.4AI score0.00323EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/02 12:00 a.m.•10 views

CVE-2020-5979: Undefined Security Weakness

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which a user is presented with a dialog box for input by a high-privilege process, which may lead to escalation of privileges...

7.8CVSS5.8AI score0.00323EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•40 views

Google Chrome Dialog Box Detection Data Compromise

The vulnerability of the dialog area component in Google Chrome’s web browser is related to the lack of a mechanism for controlling permissions. Exploiting this vulnerability allows an attacker to affect data integrity through a specially created HTML page...

7.1CVSS6.6AI score0.00962EPSS
SaveExploits0References11Affected Software5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/08 12:00 a.m.•11 views

CVE-2019-0375: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform Web Intelligence HTML interface, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the export dialog box of the report name resulting in reflected Cross-Site Scripting...

5.4CVSS6AI score0.00733EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/10/08 12:00 a.m.•11 views

PT-2019-4305

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform Web Intelligence HTML interface versions prior to 4.2 and 4.3 Description The issue is related to insufficient encoding of user-controlled inputs in the Web Intelligence HTML interface, allowi...

5.5CVSS0.00733EPSS
SaveExploits0References5
Rows per page
Query Builder