Lucene search
+L

111 matches found

OSV
OSV
•added 2017/04/24 7:59 p.m.•15 views

CVE-2017-3591

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Catalog Mover. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTT...

7.1CVSS5.8AI score0.01601EPSS
SaveExploits0References3
OSV
OSV
•added 2017/04/24 7:59 p.m.•15 views

CVE-2017-3554

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Catalog Mover. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP...

8.1CVSS5.8AI score0.01764EPSS
SaveExploits0References3
CVE
CVE
•added 2017/04/24 7:00 p.m.•71 views

CVE-2017-3591

CVE-2017-3591 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in the Catalog Mover subcomponent. Affects listed versions: 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability can be exploited by an unauthenticated remote attacker over HTTP, with user interaction required...

7.1CVSS6.3AI score0.01601EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•6 views

CVE-2017-3591: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Catalog Mover. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTT...

7.1CVSS8AI score0.01601EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•6 views

CVE-2017-3554: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Catalog Mover. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP...

8.1CVSS8AI score0.01764EPSS
SaveExploits0References1
NVD
NVD
•added 2015/06/15 2:59 p.m.•20 views

CVE-2015-4366

Cross-site scripting XSS vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS5.3AI score0.00936EPSS
SaveExploits0References3
Prion
Prion
•added 2015/06/15 2:59 p.m.•22 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS5.7AI score0.00936EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2015/06/15 2:00 p.m.•47 views

CVE-2015-4366

CVE-2015-4366 affects Drupal’s contributed Mover module (6.x-1.0). The issue stems from insufficient sanitization of user-supplied text in certain pages, enabling Cross-Site Scripting (XSS) by remote authenticated users who have permissions to create/edit nodes. No exploit details provided beyond...

3.5CVSS5.4AI score0.00936EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/06/15 12:00 a.m.•6 views

CVE-2015-4366: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS5.9AI score0.00936EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/06/15 12:00 a.m.•4 views

PT-2015-6548

Name of the Vulnerable Software and Affected Versions Mover module versions 6.x-1.0 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with specific permissions to inject arbitrary web script or HTML. Recommendations For Mover module version 6.x-1.0, update t...

3.5CVSS5.8AI score0.00936EPSS
SaveExploits0References4
CNVD
CNVD
•added 2015/03/10 12:00 a.m.•15 views

Drupal Mover Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Mover is one of the modules used to provide content movement between Drupal sites. A cross-site scripting vulnerability exists in the Drupal Mover module that stems from the program's...

3.5CVSS6.8AI score0.00936EPSS
SaveExploits0References1
Drupal
Drupal
•added 2015/03/04 12:00 a.m.•29 views

SA-CONTRIB-2015-070 - Mover - Cross Site Scripting (XSS) - Unsupported

The Mover modules provide the ability to move content between Drupal sites. The module doesn't sufficiently sanitize user supplied text in some pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have permission to...

3.5CVSS5.9AI score0.00936EPSS
SaveExploits0References8
NVD
NVD
•added 2014/10/15 10:55 p.m.•32 views

CVE-2014-6508

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availability via vectors related to iSCSI Data Mover IDM...

7.8CVSS5.8AI score0.02778EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2014/10/15 10:03 p.m.•39 views

CVE-2014-6508

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availability via vectors related to iSCSI Data Mover IDM...

5.8AI score0.02778EPSS
SaveExploits0References4
CVE
CVE
•added 2014/10/15 10:03 p.m.•72 views

CVE-2014-6508

CVE-2014-6508 affects Oracle Solaris 10/11 ( Solaris component: iSCSI Data Mover IDM). The connected Nessus plugins describe the vulnerable surface as the IDM subcomponent on Solaris 10 (x86 and SPARC) and indicate that versions 10 and 11 are affected. The root cause is not explicitly detailed in...

7.8CVSS5.9AI score0.02778EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/10/15 12:00 a.m.•7 views

CVE-2014-6508: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availability via vectors related to iSCSI Data Mover IDM...

7.8CVSS6AI score0.02778EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2014/10/15 12:00 a.m.•4 views

PT-2014-7263

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris versions 10 and 11 Description The issue affects the availability of the system and is related to vectors concerning the iSCSI Data Mover IDM in Oracle Sun Solaris. Recommendations For Oracle Sun Solaris versions 10 and 11, ...

7.8CVSS0.02778EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2014/10/15 12:00 a.m.•24 views

Oracle Solaris Critical Patch Update : oct2014_SRU11_1_20_5_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: iSCSI Data MoverIDM. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows...

7.8CVSS5.4AI score0.02778EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2014/09/17 12:00 a.m.•32 views

Solaris 10 (sparc) : 150312-06 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: iSCSI Data MoverIDM. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability...

7.8CVSS6.3AI score0.02778EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2014/09/17 12:00 a.m.•30 views

Solaris 10 (x86) : 150313-06 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: iSCSI Data MoverIDM. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability...

7.8CVSS6.3AI score0.02778EPSS
SaveExploits0References2
Rows per page
Query Builder