CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

CVE-2017-3430

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

7.2AI score0.01237EPSS

Cvelist•added 2017/01/27 10:1 p.m.•23 views

CVE-2016-5614

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access...

3.2AI score0.01254EPSS

Cvelist•added 2017/01/27 10:1 p.m.•28 views

CVE-2017-3401

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

8.2AI score0.01237EPSS

Cvelist•added 2017/01/27 10:1 p.m.•27 views

CVE-2017-3412

8.2AI score0.01237EPSS

CVE-2016-8316

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

6AI score0.00836EPSS

Cvelist•added 2017/01/27 10:1 p.m.•32 views

CVE-2017-3421

8.2AI score0.01547EPSS

CVE-2016-8299

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

6.2AI score0.01106EPSS

Cvelist•added 2017/01/27 10:1 p.m.•20 views

CVE-2016-8298

7.7AI score0.01472EPSS

CVE-2016-8297

6.8AI score0.01472EPSS

Vulnrichment•added 2017/01/27 10:1 p.m.•8 views

CVE-2017-3360

Vulnerability in the Oracle Customer Intelligence component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

7.2AI score0.01248EPSS

myhack58•added 2016/08/16 12:0 a.m.•78 views

Samsung smart surveillance camera is explosion proof remote code execution vulnerability with POC-the exploit-warning-the black bar safety net

Vulnerability overview EDB-ID:4 0 2 3 5 Vulnerability found by: PentestPartners CVE: no Release Date: 2 0 1 6 years 0 8 month 1 4 day Vulnerability type: remote vulnerability Affected platforms: the system hardware Affected App: no Exploit POC: click to download Foreword Currently, the vast...

8.4AI score

Packet Storm•added 2016/05/24 12:0 a.m.•39 views

MediaLink MWN-WAPR300N Insecure Session

MediaLink router MWN-WAPR300N - Several Vulnerabilities The vulnerabilities reported here are for the firmware version currently being shipped by Amazon.com. This is hardware version 2.0, firmware version V5.07.51enMDL01 . I have no knowledge of the behavior of previous versions of this router...

7.4AI score

NVD•added 2016/01/18 5:59 a.m.•13 views

CVE-2015-7886

NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors...

4.3CVSS4.1AI score0.01231EPSS

Cvelist•added 2016/01/18 2:0 a.m.•21 views

CVE-2015-7886

NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors...

4AI score0.01231EPSS

UbuntuCve•added 2015/09/22 12:0 a.m.•31 views

CVE-2015-4520

Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection mechanisms by leveraging 1 duplicate cache-key generation or 2 retrieval of a value from an incorrect HTTP Access-Control- response header...

6.4CVSS7.2AI score0.03095EPSS

Exploits0References4

ThreatPost•added 2014/12/30 2:20 p.m.•12 views

Majority of 4G USB Modems, SIM Cards Exploitable

Researchers say 4G USB modems contain exploitable vulnerabilities through which attackers could, and researchers have, managed to gain full control of the machines to which the devices are connected. Researchers from Positive Technologies presented a briefing detailing how to compromise USB modem...

8.4AI score

seebug.org•added 2014/07/01 12:0 a.m.•15 views

Info2www 1.0/1.1 CGI Input Handling Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1995/info The info2www script allows HTTP access to information stored in GNU EMACS Info Nodes. This script fails to properly parse input and can be used to execute commands on the server with permissions of the web serve...

7.1AI score

seebug.org•added 2014/07/01 12:0 a.m.•17 views

Novell Access Management SSLVPN Server Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22787/info Novell Access Management SSLVPN Server is prone to a security-bypass vulnerability. A remote authenticated attacker can exploit this issue to access corporate resources normally restricted within VPN access...

7.1AI score

NVD•added 2013/09/25 10:31 a.m.•18 views

CVE-2013-4024

IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network...

4.3CVSS6.4AI score0.01066EPSS