Lucene search
+L

9443 matches found

BDU FSTEC
BDU FSTEC
•added 2020/02/03 12:00 a.m.•21 views

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Preferences component in the Oracle CRM Technical Foundation system is related to lack of access control. Exploiting this vulnerability allows an attacker to gain access to modify, add, or delete data using the HTTPS network protocol...

4.7CVSS5.9AI score0.00872EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/02/03 12:00 a.m.•17 views

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows attackers to access, modify, add, or delete data, as well as gain unauthorized access to protected information.

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system is related to lack of access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or gain unauthorized access to protected information using the HTTPS network...

8.2CVSS7.4AI score0.01275EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/02/03 12:00 a.m.•15 views

The vulnerability of the Oracle iSupport web application, related to access control deficiencies, allows an attacker to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Oracle iSupport web application relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data, or to unauthorizedly access protected information using the HTTPS protocol...

8.2CVSS7.4AI score0.01314EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2020/01/30 6:15 p.m.•41 views

CVE-2020-7904

In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS...

7.4CVSS7.5AI score0.01418EPSS
SaveExploits0References2
Prion
Prion
•added 2020/01/30 6:15 p.m.•39 views

Design/Logic Flaw

In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS...

5.8CVSS7.5AI score0.01418EPSS
SaveExploits0References2Affected Software1
Openbugbounty
Openbugbounty
•added 2020/01/30 5:57 p.m.•12 views

cialis-price.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1080309 Security Researcher geeknik Helped patch 8899 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting cialis-price.com website a...

0.2AI score
SaveExploits0
Cvelist
Cvelist
•added 2020/01/30 5:01 p.m.•42 views

CVE-2020-7904

In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS...

7.5AI score0.01418EPSS
SaveExploits0References2
OSV
OSV
•added 2020/01/28 4:15 p.m.•12 views

DEBIAN-CVE-2014-3230

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...

5.9CVSS5.8AI score0.01343EPSS
SaveExploits1References1
OSV
OSV
•added 2020/01/28 4:15 p.m.•29 views

CVE-2014-3230

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...

5.9CVSS6.7AI score
SaveExploits0References12
Mend
Mend
•added 2020/01/28 3:05 p.m.•2 views

CVE-2014-3230

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...

8.2CVSS0.01343EPSS
SaveExploits1References8
CVE
CVE
•added 2020/01/28 3:05 p.m.•94 views

CVE-2014-3230

CVE-2014-3230 affects the libwww-perl LWP::Protocol::https module (versions 6.04–6.06) when using IO::Socket::SSL as the SSL socket class. The underlying issue is that server certificate validation can be disabled via the HTTPS_CA_DIR or HTTPS_CA_FILE environment variables. Impact described in th...

5.9CVSS5.5AI score0.01343EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/28 12:00 a.m.•2 views

CVE-2014-3230: Improper Certificate Validation

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the 1 HTTPSCADIR or 2 HTTPSCAFILE environment variable...

5.9CVSS6.2AI score0.01343EPSS
SaveExploits1References2
Veracode
Veracode
•added 2020/01/24 12:24 a.m.•41 views

Denial Of Service (DoS)

undertow is vulnerable to denial of service DoS. The vulnerability exists when the Undertow HTTP server is listening on HTTPS...

7.5CVSS0.4AI score0.02137EPSS
SaveExploits0References26Affected Software24
Openbugbounty
Openbugbounty
•added 2020/01/23 5:59 p.m.•20 views

mysupport.netapp.com Cross Site Scripting vulnerability

Security Researcher agrawalsmart7 Helped patch 38 vulnerabilities Received 1 Coordinated Disclosure badges Received 2 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting mysupport.netapp.com website and its users. Following...

0.2AI score
SaveExploits0
OSV
OSV
•added 2020/01/23 5:15 p.m.•12 views

DEBIAN-CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.5AI score0.02137EPSS
SaveExploits0References1
NVD
NVD
•added 2020/01/23 5:15 p.m.•63 views

CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.4AI score0.02137EPSS
SaveExploits0References3
Prion
Prion
•added 2020/01/23 5:15 p.m.•27 views

Design/Logic Flaw

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

5CVSS8.1AI score0.02137EPSS
SaveExploits0References3Affected Software5
UbuntuCve
UbuntuCve
•added 2020/01/23 5:15 p.m.•57 views

CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.1AI score0.02137EPSS
SaveExploits0References1
OSV
OSV
•added 2020/01/23 5:15 p.m.•13 views

UBUNTU-CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

7.5CVSS7.1AI score0.02137EPSS
SaveExploits0References2
Mend
Mend
•added 2020/01/23 4:25 p.m.•2 views

CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service DOS to make the service unavailable on SSL...

8.7CVSS0.02137EPSS
SaveExploits0References5
Rows per page
Query Builder