Lucene search
+L

10753 matches found

CNVD
CNVD
•added 2018/01/17 12:00 a.m.•16 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02276)

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

4.3CVSS6.6AI score0.01093EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/01/17 12:00 a.m.•12 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02267)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Oracle JDeveloper is one of the free integrated development environment IDE components. A...

8.2CVSS6.8AI score0.01449EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/01/17 12:00 a.m.•13 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02271)

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation.Oracle Internet Directory OID is a standards-based LDAP directory component used to centrally store and manage web Service Names. A security vulnerability exists in t...

8CVSS6.7AI score0.01729EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/01/17 12:00 a.m.•12 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02272)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other functionality.Oracle Business Intelligence Enterprise Edition is one of the business intelligence...

6.5CVSS6.8AI score0.01446EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/01/17 12:00 a.m.•14 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02269)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. oracle WebCenter Content is one of the enterprise content management solution...

8.2CVSS6.6AI score0.01347EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/01/17 12:00 a.m.•15 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02274)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

5.3CVSS6.8AI score0.01529EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/01/17 12:00 a.m.•39 views

Oracle Fusion Middleware Directory Traversal Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Oracle JDeveloper is one of the free integrated development environment IDE components. A...

4.7CVSS6.6AI score0.01448EPSS
SaveExploits4References1
CNVD
CNVD
•added 2018/01/17 12:00 a.m.•14 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02273)

Oracle Fusion Middleware Oracle Fusion Middleware is a suite of Oracle's business innovation platforms for enterprise and cloud environments.Oracle HTTP Server is one of the web server components based on Apache open source technology, which delivers static and dynamic content and can be integrat...

5.3CVSS6.7AI score0.01974EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/01/17 12:00 a.m.•13 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02270)

Oracle Fusion Middleware is Oracle's suite of business innovation platforms for enterprise and cloud environments, of which Oracle WebCenter Portal is a component that seamlessly integrates portals with enterprise applications. A security vulnerability exists in the WebCenter Spaces Application...

8.2CVSS6.6AI score0.01733EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/01/17 12:00 a.m.•14 views

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02268)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. oracle WebCenter Content is one of the enterprise content management solution...

8.2CVSS6.6AI score0.01347EPSS
SaveExploits0References1
Hacker One
Hacker One
•added 2017/12/25 9:57 p.m.•109 views

U.S. Dept Of Defense: WebLogic Server Side Request Forgery

Universal Description Discovery and Integration UDDI application is publicly available on this WebLogic server. The SearchPublicRegistries.jsp page can be abused by unauthenticated attackers to cause the WebLogic web server to connect to an arbitrary TCP port of an arbitrary host. Responses...

5CVSS8.9AI score0.38152EPSS
SaveExploits8
CNVD
CNVD
•added 2017/11/22 12:00 a.m.•14 views

OpenStack Swauth Authentication Bypass Vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration in collaboration with Rackspace in the U.S. OpenStack Swauth is one of the licensing systems.OpenStack Swift is a cloud storage software for retrieving large amounts of data. A security...

9.8CVSS7AI score0.08422EPSS
SaveExploits0References1
Prion
Prion
•added 2017/11/21 1:29 p.m.•26 views

Authentication flaw

An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...

7.5CVSS9.5AI score0.08422EPSS
SaveExploits0References5Affected Software3
NVD
NVD
•added 2017/11/21 1:29 p.m.•30 views

CVE-2017-16613

An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...

9.8CVSS9.6AI score0.08422EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2017/11/21 1:29 p.m.•33 views

CVE-2017-16613

An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...

9.8CVSS7.2AI score0.08422EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2017/11/21 1:29 p.m.•8 views

CVE-2017-16613

An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...

9.8CVSS5.6AI score0.08422EPSS
SaveExploits0References6
OSV
OSV
•added 2017/11/21 1:29 p.m.•16 views

UBUNTU-CVE-2017-16613

An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...

9.8CVSS7.3AI score0.08422EPSS
SaveExploits0References3
CVE
CVE
•added 2017/11/21 1:00 p.m.•92 views

CVE-2017-16613

CVE-2017-16613 affects OpenStack Swauth (middleware.py) when used with OpenStack Swift up to versions 2.15.1. The issue: the Swift object store and proxy may save unhashed authentication tokens to a log file as part of GET URIs, which enables an attacker to bypass authentication by injecting a to...

9.8CVSS9.3AI score0.08422EPSS
SaveExploits0References5Affected Software2
CNVD
CNVD
•added 2017/11/16 12:00 a.m.•12 views

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Tuxedo Component (CNVD-2017-34222)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other capabilities.Oracle Tuxedo is one of the components used to develop, deploy, and manage...

10CVSS6.8AI score0.02142EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/11/16 12:00 a.m.•13 views

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Tuxedo Component (CNVD-2017-34232)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other capabilities.Oracle Tuxedo is one of the components used to develop, deploy, and manage...

10CVSS6.8AI score0.02142EPSS
SaveExploits0References1
Rows per page
Query Builder