Lucene search
+L

6049 matches found

OSV
OSV
•added 2018/10/17 5:23 p.m.•81 views

GHSA-M929-7FR6-CVJG Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references

Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict extern...

7.5CVSS7.6AI score0.04935EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2018/10/17 5:23 p.m.•50 views

Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references

Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict extern...

7.5CVSS3.7AI score0.04935EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2018/10/17 5:23 p.m.•74 views

GHSA-4FQ3-MR56-CG6R Spring Data Commons remote code injection vulnerability

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted request parameters...

9.8CVSS8.3AI score0.96956EPSS
SaveExploits9References9
OSV
OSV
•added 2018/10/17 1:31 a.m.•14 views

CVE-2018-3181

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC ENOAD. The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

5.5CVSS7.3AI score0.0044EPSS
SaveExploits0References2
NVD
NVD
•added 2018/10/17 1:31 a.m.•31 views

CVE-2018-3181

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC ENOAD. The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

5.5CVSS4.6AI score0.0044EPSS
SaveExploits0References2
OSV
OSV
•added 2018/10/17 1:31 a.m.•15 views

CVE-2018-3160

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC Admin, OHC Management. The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged attacker with logon to t...

7.7CVSS7.3AI score0.00503EPSS
SaveExploits0References2
NVD
NVD
•added 2018/10/17 1:31 a.m.•29 views

CVE-2018-3160

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC Admin, OHC Management. The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged attacker with logon to t...

7.7CVSS7AI score0.00503EPSS
SaveExploits0References2
Prion
Prion
•added 2018/10/17 1:31 a.m.•27 views

Buffer overflow

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC Admin, OHC Management. The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged attacker with logon to t...

4.4CVSS7.7AI score0.00503EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2018/10/17 1:31 a.m.•20 views

Buffer overflow

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC ENOAD. The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

2.1CVSS5.3AI score0.0044EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2018/10/17 1:00 a.m.•28 views

CVE-2018-3160

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC Admin, OHC Management. The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged attacker with logon to t...

6.7AI score0.00503EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/10/17 1:00 a.m.•31 views

CVE-2018-3160

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC Admin, OHC Management. The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged attacker with logon to t...

7.8AI score0.00503EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/10/17 1:00 a.m.•35 views

CVE-2018-3181

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC ENOAD. The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

5.5AI score0.0044EPSS
SaveExploits0References2
CVE
CVE
•added 2018/10/17 1:00 a.m.•62 views

CVE-2018-3181

CVE-2018-3181 affects Oracle Hospitality Cruises Shipboard Property Management System, subcomponent OHC ENOAD, within Oracle Hospitality Applications, version 8.0. The vulnerability permits a low-privileged user who can log on to the infrastructure running the system to access data beyond intende...

5.5CVSS5.3AI score0.0044EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2018/10/17 1:00 a.m.•69 views

CVE-2018-3160

The CVE-2018-3160 vulnerability affects the Oracle Hospitality Cruise Shipboard Property Management System (Oracle Hospitality Applications), specifically the OHC Admin and OHC Management subcomponents, with affected version 8.0. The issue is described as a high-severity vulnerability (CVSS v3.0 ...

7.7CVSS7.7AI score0.00503EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2018/10/17 12:00 a.m.•13 views

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-25199)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the mandatory property of TimeField in Foxit Reader 9.2.0.9297 and...

8.8CVSS8.8AI score0.03918EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/10/17 12:00 a.m.•22 views

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-25193)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the Form count property in Foxit Reader 9.2.0.9297 and earlier versio...

8.8CVSS8.7AI score0.03918EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/10/17 12:00 a.m.•21 views

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-25194)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the Form count property in Foxit Reader 9.2.0.9297 and earlier versio...

8.8CVSS8.7AI score0.03918EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/10/17 12:00 a.m.•14 views

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-23728)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the display property of the CheckBox object in Foxit Reader 9.2.0.929...

8.8CVSS8.8AI score0.03855EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/10/17 12:00 a.m.•17 views

Foxit Reader and Foxit PhantomPDF for Windows Remote Code Execution Vulnerability

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A remote code execution vulnerability exists in the handling of the rotate property of TimeField in Foxit Reader 9.2.0.9297 and...

8.8CVSS9AI score0.03918EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/17 12:00 a.m.•6 views

CVE-2018-3181: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC ENOAD. The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

5.5CVSS5.9AI score0.0044EPSS
SaveExploits0References1
Rows per page
Query Builder