Lucene search
K

1161 matches found

CNVD
CNVD
added 2017/07/19 12:0 a.m.2 views

Sony WG-C10 Security Bypass Vulnerability

The Sony WG-C10 is a wireless portable server from Sony Japan. A security vulnerability exists in Sony WG-C10 version 3.0.79 and earlier. An attacker could exploit the vulnerability to bypass access control and obtain or change information stored on an external storage device...

9.1CVSS9AI score0.00297EPSS
Exploits0References1
OSV
OSV
added 2017/07/19 12:0 a.m.0 views

UBUNTU-CVE-2017-3636

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client programs. Supported versions that are affected are 5.5.56 and earlier and 5.6.36 and earlier. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server execut...

5.3CVSS6.6AI score0.00087EPSS
Exploits0References5
OSV
OSV
added 2017/06/22 1:29 p.m.1 views

CVE-2017-3631

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful...

5.3CVSS5.8AI score0.32075EPSS
Exploits6References4
OSV
OSV
added 2017/06/22 1:29 p.m.2 views

CVE-2017-3630

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

5.3CVSS5.8AI score0.32075EPSS
Exploits6References4
BDU FSTEC
BDU FSTEC
added 2017/05/15 12:0 a.m.2 views

The vulnerability of the Oracle MySQL database management system allows a hacker to gain privileged access when modifying data or causing service failures.

The vulnerability of the MySQL Server component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileged access to modify, add, or delete data. This can also cause...

5.5CVSS6.5AI score0.00368EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2017/05/09 12:0 a.m.3 views

PT-2017-2143 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: A remote code execution issue exists due to improper memory object access. This could allow a remote attacker to execute arbitrary code or cause memory corruption. The vulnerabili...

8.8CVSS8.7AI score0.65302EPSS
Exploits0References9
OSV
OSV
added 2017/04/25 7:59 p.m.1 views

CVE-2017-3347

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via...

7.1CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2017/04/25 7:59 p.m.1 views

CVE-2017-3342

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via...

7.1CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2017/04/25 7:59 p.m.1 views

CVE-2017-3355

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via...

7.1CVSS5.8AI score0.01015EPSS
Exploits0References2
OSV
OSV
added 2017/04/24 7:59 p.m.2 views

CVE-2017-3537

Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications subcomponent: Mobile Communications Platform. Supported versions that are affected are 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. Easily "exploitable" vulnerability allows unauthenticated attacker with network access...

6.1CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2017/04/24 7:59 p.m.3 views

CVE-2017-3504

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Automatic Service Reque...

5.1CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2017/04/24 7:59 p.m.3 views

CVE-2017-3484

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Limits and Collateral. Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows low privileged attacker...

5.4CVSS5.8AI score0.00221EPSS
Exploits0References3
OSV
OSV
added 2017/04/24 7:59 p.m.1 views

CVE-2017-3489

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Security Management System. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low...

5.4CVSS5.8AI score
Exploits0References3
Cvelist
Cvelist
added 2017/04/13 7:0 p.m.15 views

CVE-2016-6818

SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service data deletion, or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor...

9.9AI score0.01509EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2017/02/09 12:0 a.m.3 views

Vulnerability of the Java Platform software platform, allowing attackers to modify data

The vulnerability of the Java Platform’s networking components is related to security configuration errors. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to modify, add, or delete data using network packets...

5CVSS6.8AI score0.00702EPSS
Exploits0References3
OSV
OSV
added 2017/01/27 10:59 p.m.2 views

CVE-2017-3300

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Multichannel Framework. Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.1CVSS7.3AI score
Exploits0References4
OSV
OSV
added 2017/01/27 10:59 p.m.1 views

CVE-2017-3282

Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

4.7CVSS7.3AI score0.00549EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2017/01/27 10:59 p.m.1 views

CVE-2016-8303

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

6.1CVSS5.5AI score0.00501EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2016/11/30 8:59 p.m.16 views

Design/Logic Flaw

IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

5.5CVSS6AI score0.00154EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2016/10/21 12:0 a.m.46 views

Oracle VirtualBox VRDE Privilege Escalation Vulnerability - Linux

Oracle VirtualBox is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.1CVSS9.2AI score0.00217EPSS
Exploits0References2
Rows per page
Query Builder