Lucene search
+L

7982 matches found

ATTACKERKB
ATTACKERKB
added 2020/02/05 12:00 a.m.117 views

CVE-2019-15126 aka Kr00k

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors related to state transitions in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a...

8.8CVSS0.7AI score0.07314EPSS
SaveExploits9References14
BDU FSTEC
BDU FSTEC
added 2020/02/03 12:00 a.m.8 views

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows attackers to access, modify, add, or delete data, as well as gain unauthorized access to protected information.

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system is related to lack of access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or gain unauthorized access to protected information using the HTTPS network...

8.2CVSS7.4AI score0.01275EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/03 12:00 a.m.11 views

The vulnerability of the Oracle iSupport web application, related to access control deficiencies, allows an attacker to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Oracle iSupport web application relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data, or to unauthorizedly access protected information using the HTTPS protocol...

8.2CVSS7.4AI score0.01314EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/03 12:00 a.m.11 views

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Preferences component in the Oracle CRM Technical Foundation system is related to lack of access control. Exploiting this vulnerability allows an attacker to gain access to modify, add, or delete data using the HTTPS network protocol...

4.7CVSS5.9AI score0.00872EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2020/01/30 6:15 p.m.34 views

CVE-2020-7904

In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS...

7.4CVSS7.5AI score0.01418EPSS
SaveExploits0References2
Prion
Prion
added 2020/01/30 6:15 p.m.29 views

Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS...

5.8CVSS7.5AI score0.01418EPSS
SaveExploits0References2Affected Software1
Openbugbounty
Openbugbounty
added 2020/01/30 5:57 p.m.11 views

cialis-price.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1080309 Security Researcher geeknik Helped patch 8899 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting cialis-price.com website a...

0.2AI score
SaveExploits0
Cvelist
Cvelist
added 2020/01/30 5:01 p.m.33 views

CVE-2020-7904

In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS...

7.5AI score0.01418EPSS
SaveExploits0References2
OSV
OSV
added 2020/01/28 4:15 p.m.24 views

CVE-2014-3230

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...

5.9CVSS6.7AI score
SaveExploits0References12
OSV
OSV
added 2020/01/28 4:15 p.m.9 views

DEBIAN-CVE-2014-3230

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...

5.9CVSS5.8AI score0.01338EPSS
SaveExploits1References1
CVE
CVE
added 2020/01/28 3:05 p.m.83 views

CVE-2014-3230

CVE-2014-3230 affects the libwww-perl LWP::Protocol::https module (versions 6.04–6.06) when using IO::Socket::SSL as the SSL socket class. The underlying issue is that server certificate validation can be disabled via the HTTPS_CA_DIR or HTTPS_CA_FILE environment variables. Impact described in th...

5.9CVSS5.5AI score0.01338EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2020/01/24 12:24 a.m.36 views

Denial Of Service (DoS)

undertow is vulnerable to denial of service DoS. The vulnerability exists when the Undertow HTTP server is listening on HTTPS...

7.5CVSS0.4AI score0.02137EPSS
SaveExploits0References26Affected Software24
Openbugbounty
Openbugbounty
added 2020/01/23 5:59 p.m.19 views

mysupport.netapp.com Cross Site Scripting vulnerability

Security Researcher agrawalsmart7 Helped patch 38 vulnerabilities Received 1 Coordinated Disclosure badges Received 2 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting mysupport.netapp.com website and its users. Following...

0.2AI score
SaveExploits0
NVD
NVD
added 2020/01/23 5:15 p.m.52 views

CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.4AI score0.02137EPSS
SaveExploits0References3
OSV
OSV
added 2020/01/23 5:15 p.m.5 views

DEBIAN-CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.5AI score0.02137EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/23 5:15 p.m.8 views

UBUNTU-CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.1AI score0.02137EPSS
SaveExploits0References2
Prion
Prion
added 2020/01/23 5:15 p.m.26 views

Design/Logic Flaw

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

5CVSS8.1AI score0.02137EPSS
SaveExploits0References3Affected Software5
UbuntuCve
UbuntuCve
added 2020/01/23 5:15 p.m.48 views

CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.1AI score0.02137EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2020/01/23 4:25 p.m.102 views

CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.5AI score0.02137EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/01/23 4:25 p.m.54 views

CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.3AI score0.02137EPSS
SaveExploits0References3
Rows per page
Query Builder