Lucene search
+L

482 matches found

BDU FSTEC
BDU FSTEC
added 2020/11/13 12:0 a.m.8 views

The vulnerability of the E-Business Suite component XDO in the Oracle BI Publisher reporting tool allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the E-Business Suite component XDO in the Oracle BI Publisher reporting tool is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add,...

8.5CVSS7.7AI score0.01298EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/13 12:0 a.m.7 views

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, ...

7.8CVSS7.4AI score0.01432EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/12 12:0 a.m.6 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.8CVSS6.6AI score0.02044EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/12 12:0 a.m.8 views

Vulnerability of the MySQL Server component: The MySQL Server component of the database management system allows a hacker to trigger a service failure.

Vulnerability of the MySQL Server component: The MySQL Server component of the database management system is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.8CVSS6.7AI score0.02653EPSS
Exploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/11/10 12:0 a.m.6 views

The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Marketing Administration component of Oracle’s marketing platform relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or delete...

8.5CVSS7.7AI score0.01256EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/10 12:0 a.m.7 views

The vulnerability of the IQR-Foundation component of the Oracle Hyperion BI+ service allows a intruder to gain unauthorized access to protected information.

The vulnerability of the IQR-Foundation component of the Oracle Hyperion BI+ service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information via the HTTP network protocol...

2.1CVSS6.2AI score0.00816EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.4 views

The vulnerability of the Oracle Application Express Group Calendar component of the Oracle Database Server database management system allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Oracle Application Express Group Calendar component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected...

5.5CVSS6.9AI score0.00726EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.9 views

The vulnerability of the Scheduler component of the Oracle Database Server system allows a hacker to execute arbitrary code.

The vulnerability of the Scheduler component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.8CVSS8.1AI score0.00438EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:0 a.m.5 views

The vulnerability of the Oracle Text component of the Oracle Database Server database management system allows a perpetrator to execute arbitrary code.

The vulnerability of the Oracle Text component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.1CVSS8.1AI score0.01721EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2020/10/21 7:15 p.m.4 views

CVE-2020-3582

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...

6.1CVSS7AI score0.01159EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/10/16 12:0 a.m.6 views

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of Remote Desktop Services RDS for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created application...

7.8CVSS7.2AI score0.05847EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/09/18 12:0 a.m.5 views

The vulnerability of the Workbench search system of Oracle Commerce Guided Search and the Oracle Commerce Experience Manager, a tool for managing the user environment, allows an attacker to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Workbench search engine component of Oracle Commerce Guided Search and the Oracle Commerce Experience Manager user environment management tool exists due to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to...

7.4CVSS7.3AI score0.01596EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:0 a.m.5 views

The vulnerability of the Oracle Security Service software, which arises due to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Oracle Security Service software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the HTTPS protocol...

5.9CVSS6.8AI score0.01288EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:0 a.m.9 views

The vulnerability of the Web Access component of the Primavera Portfolio Management software allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Web Access component of Primavera Portfolio Management software exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized access to protected...

6.1CVSS6.8AI score0.01134EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/11 12:0 a.m.6 views

The vulnerability of Cisco Webex Training Center’s software for web conferencing, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Cisco Webex Training’s web conferencing software relates to insufficient validation of input data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.01079EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/02 12:0 a.m.7 views

The vulnerability of the Microsoft .NET Framework software lies in its lack of proper input validation, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software exists due to insufficient testing of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...

10CVSS7.7AI score0.03763EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/08/14 12:0 a.m.8 views

The vulnerability of the Java SE product’s software platform component, Oracle Java SE, is related to insufficient validation of input data. This allows a malicious actor to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the Hotspot component in Oracle Java SE software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or delete data using the HTTP protocol...

4.3CVSS6.5AI score0.03377EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/08/05 12:0 a.m.7 views

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to modify, add, or delete data...

4.7CVSS6.4AI score0.01024EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/08/05 12:0 a.m.5 views

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...

6.1CVSS6.9AI score0.01151EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/29 12:0 a.m.7 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.5CVSS7.3AI score0.00554EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder