Lucene search
K

94 matches found

OSV
OSV
added 2021/04/22 10:15 p.m.1 views

CVE-2021-2220

Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

5.4CVSS6.7AI score0.00596EPSS
Exploits0References1
OSV
OSV
added 2021/04/22 10:15 p.m.2 views

CVE-2021-2150

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Shopping Cart. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...

8.2CVSS6.8AI score0.00933EPSS
Exploits0References1
OSV
OSV
added 2020/10/21 3:15 p.m.2 views

CVE-2020-14801

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

6.1CVSS6.8AI score0.00948EPSS
Exploits0References1
OSV
OSV
added 2020/10/21 3:15 p.m.3 views

CVE-2020-14810

Vulnerability in the Oracle Hospitality Suite8 product of Oracle Hospitality Applications component: WebConnect. Supported versions that are affected are 8.10.2 and 8.11-8.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5.4CVSS6.7AI score
Exploits0References1
OSV
OSV
added 2020/10/21 3:15 p.m.2 views

CVE-2020-14768

Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion component: Smart View Provider. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to t...

4.3CVSS6.7AI score0.0048EPSS
Exploits0References1
OSV
OSV
added 2020/08/07 12:15 a.m.1 views

CVE-2020-16227

Delta Electronics TPEditor Versions 1.97 and prior. An improper input validation may be exploited by processing a specially crafted project file not validated when the data is entered by a user. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execut...

7.8CVSS6AI score0.01872EPSS
Exploits0References2
OSV
OSV
added 2020/08/07 12:15 a.m.3 views

CVE-2020-16225

Delta Electronics TPEditor Versions 1.97 and prior. A write-what-where condition may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or crash the application...

7.8CVSS7.3AI score0.02089EPSS
Exploits0References2
CNVD
CNVD
added 2020/08/07 12:0 a.m.1 views

Delta Electronics TPEditor Buffer Overflow Vulnerability (CNVD-2020-47576)

Delta Electronics TPEditor is a Windows-based Delta text panel programming software from Delta Electronics, Taiwan, China. A security vulnerability exists in Delta Electronics TPEditor version 1.97 and earlier. The vulnerability can be exploited by an attacker with a specially crafted project fil...

7.8CVSS7.6AI score0.02089EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2020/08/06 12:0 a.m.3 views

PT-2020-14824 · Delta Electronics · Tpeditor

Name of the Vulnerable Software and Affected Versions: Delta Electronics TPEditor versions 1.97 and prior Description: A write-what-where condition may be exploited by processing a specially crafted project file, potentially allowing an attacker to read or modify information, execute arbitrary...

7.8CVSS7.6AI score0.02089EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/08/05 12:0 a.m.1 views

The vulnerability of the Analytics Actions component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Analytics Actions component of the Oracle Business Intelligence Enterprise Edition software lies in deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to read, modify, add, or delete data using the HTTP protocol...

8.2CVSS7.7AI score0.01432EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2020/07/15 6:15 p.m.3 views

CVE-2020-2976

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

5.4CVSS6.8AI score0.00688EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2020/01/15 4:34 p.m.3 views

CVE-2020-2602

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Tree Manager. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

6.1CVSS5.4AI score0.01162EPSS
Exploits0References1
OSV
OSV
added 2019/10/16 6:15 p.m.1 views

CVE-2019-2942

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

8.2CVSS7.3AI score0.01412EPSS
Exploits0References1
OSV
OSV
added 2019/07/23 11:15 p.m.2 views

DEBIAN-CVE-2019-2816

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access v...

4.8CVSS7AI score0.02296EPSS
Exploits0References1
OSV
OSV
added 2019/04/23 7:32 p.m.3 views

CVE-2019-2629

Vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications subcomponent: User Interface. The supported version that is affected is 2.4.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.4CVSS6.3AI score0.00902EPSS
Exploits0References1
OSV
OSV
added 2019/04/23 7:32 p.m.2 views

CVE-2018-3312

Vulnerability in the Oracle Retail Customer Engagement component of Oracle Retail Applications subcomponent: Segment. Supported versions that are affected are 16.0 and 17.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Retail...

5.5CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2018/04/19 2:29 a.m.3 views

CVE-2018-2876

Vulnerability in the Oracle Retail Integration Bus component of Oracle Retail Applications subcomponent: RIB KernalApache Commons Collections. The supported version that is affected is 13.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

7.1CVSS5.8AI score0.01048EPSS
Exploits0References2
OSV
OSV
added 2018/04/19 2:29 a.m.3 views

CVE-2018-2857

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

6.3CVSS7.3AI score0.01415EPSS
Exploits0References3
OSV
OSV
added 2018/04/19 2:29 a.m.2 views

CVE-2018-2738

Vulnerability in the Oracle Retail Central Office component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

6.5CVSS7.3AI score0.01111EPSS
Exploits0References2
OSV
OSV
added 2018/04/05 9:29 p.m.2 views

CVE-2017-14465

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

9.8CVSS5.7AI score
Exploits0References1
Rows per page
Query Builder