9465 matches found
CVE-2020-14549
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Server. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network...
CVE-2020-14549
CVE-2020-14549 affects Oracle Primavera Portfolio Management Web Server in versions 16.1.0.0–16.1.5.1, 18.0.0.0–18.0.2.0, and 19.0.0.0. An unauthenticated attacker with network access over HTTPS can compromise Primavera Portfolio Management, with attacks requiring user interaction. Consequences i...
CVE-2020-14530: Undefined Security Weakness
Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: None. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successfu...
CVE-2020-14549: Undefined Security Weakness
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Server. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network...
PT-2020-3372
Name of the Vulnerable Software and Affected Versions Oracle Security Service versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to the SSL API component of Oracle Security Service, which has inadequate access controls. This allows an unauthenticated attacker with networ...
CVE-2020-14618: Undefined Security Weakness
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Mobile App. The supported version that is affected is Prior to 20.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Primavera Unifier...
CVE-2020-14617: Undefined Security Weakness
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Platform, Mobile App. Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: Prior to 20.6. Easily exploitable vulnerability allows low privileged attacker with...
PT-2020-3881
Name of the Vulnerable Software and Affected Versions: Primavera Portfolio Management versions 16.1.0.0 through 16.1.5.1 Primavera Portfolio Management versions 18.0.0.0 through 18.0.2.0 Primavera Portfolio Management version 19.0.0.0 Description: The issue allows an unauthenticated attacker with...
CVE-2020-14655: Undefined Security Weakness
Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: SSL API. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracl...
PT-2020-3863
Name of the Vulnerable Software and Affected Versions: Oracle Security Service version 11.1.1.9.0 Description: The issue allows an unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service, resulting in unauthorized access to critical data or complete access to...
CVE-2020-14327
A Server-side request forgery SSRF flaw was found in Tower. Functionality on the Tower server is abused by supplying a URL that could lead to the server processing it. This flaw leads to the connection to internal services or the exposure of additional internal services by abusing the test featur...
PT-2020-3455
Name of the Vulnerable Software and Affected Versions Oracle Primavera Unifier versions prior to 20.6 Description The issue is related to inadequate access control in the Mobile App component of Oracle Primavera Unifier, allowing an unauthenticated attacker with network access via HTTPS to...
PT-2020-3456
Name of the Vulnerable Software and Affected Versions Oracle Primavera Unifier versions 16.1, 16.2, 17.7 through 17.12, 18.8, 19.12 Oracle Primavera Unifier Mobile App versions prior to 20.6 Description The issue is related to inadequate access control in the Primavera Unifier product, allowing a...
[SECURITY] Fedora 31 Update: curl-7.66.0-2.fc31
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
UBUNTU-CVE-2020-12412
By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain with the https:// scheme, a blocked port number such as '1', and without a lock icon while controlling the page contents. This vulnerability affects Firefox 70...
CVE-2020-12412: Undefined Security Weakness
By navigating a tab using the history API, an attacker could cause the address bar to display the incorrect domain with the https:// scheme, a blocked port number such as '1', and without a lock icon while controlling the page contents. This vulnerability affects Firefox 70...
ClearPass Policy Manager Unauthenticated Remote Command Execution Exploit
!/usr/bin/env bash ClearPass Policy Manager Unauthenticated Remote Command Execution in the WebUI CVE-2020-7115 For best results use OpenSSL/libcrypto shipped with RHEL/CentOS 7.x. Questions? Contact email protected. if "$" -ne 4 ; then echo "Usage: basename $0 remote host remote port local host...
Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager
PoC for CVE-2020-5902 this just sample PoC to...
Man-in-the-middle (MitM)
github.com/containous/traefik is vulnerable to man-in-the-middle attack. It does not establish a mutual TLS verification for HTTPS sessions when the error ERRBADSSLCLIENTAUTHCERT occurs...