1287 matches found
CVE-2019-16067
NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication transmitted over cleartext protocols can allow an attacker to steal username and password combinations by intercepting authentication...
CVE-2019-16067
NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication transmitted over cleartext protocols can allow an attacker to steal username and password combinations by intercepting authentication...
HTTP Asynchronous Reverse Shell - Asynchronous Reverse Shell Using The HTTP Protocol
Today there are many ways to create a reverse shell in order to be able to remotely control a machine through a firewall. Indeed, outgoing connections are not always filtered. However security software and hardware IPS, IDS, Proxy, AV, EDR... are more and more powerful and can detect these attack...
Oracle Hospitality Opera 5 Login Component Auth Bypass
The vulnerability of the Oracle Hospitality Opera 5 software for managing hotel resources is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to modify, add, or delete data, or gain unauthorized access to protected information usi...
Open-Xchange: SSRF - Guard - Unchecked HKP servers
Description When encrypting an email, one of strategies to lookup recipient's encryption key is to contact a HKP keyserver specified in DNS records of recipient's domain. Specifically it is DNS SRV records for hkps.tcp. and hkp.tcp., which specify hostname and port of the keyserver. In source cod...
Oracle WebLogic Server Console Component Data Access
The vulnerability of the Console component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures using the HTTP...
Siebel UI Framework EAI Unauthorized Access
The vulnerability of the EAI component of the Siebel UI Framework is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...
UIF Open UI Component Unauthorized Access
The vulnerability of the UIF Open UI component of the Siebel UI Framework is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures using the HTTP...
Enterprise Config Management Unauthorized Access
The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to resource release errors. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, obtain unauthorized access to protected information, ...
Application Service Level Mgmt Unauthorized Access
The vulnerability of the Application Service Level Mgmt component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...
Enterprise Config Management Privilege Escalation
The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to resource release errors. Exploiting this vulnerability could allow an attacker operating remotely to modify, add, or delete data, gain unauthorized access to protected information...
Configuration Standard Framework Component Privilege Escalation
The vulnerability of the Configuration Standard Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protecte...
PeopleSoft Enterprise PeopleTools Data Access
The vulnerability of the PIA Core Technology component in the PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly access...
Enterprise Manager Base Platform Privilege Escalation
The vulnerability of the Discovery Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected information...
Enterprise Manager Base Platform Unauthorized Access
The vulnerability of the Enterprise Manager Base Platform component Oracle Management Service of the Oracle Enterprise Manager software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...
Enterprise Manager Base Platform Connector Framework Unauthorized Access
The vulnerability of the Enterprise Manager Base Platform Connector Framework component of the Oracle Enterprise Manager software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information or cause...
Enterprise Manager Base Platform Unauthorized Access
The vulnerability of the Enterprise Manager Base Platform Application Service Level Mgmt component of the Oracle Enterprise Manager software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access t...