Lucene search
+L

124 matches found

Cvelist
Cvelist
added 2020/02/26 3:28 p.m.23 views

CVE-2020-8951

Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager Configuration Parameter Translation page...

5.3AI score0.00637EPSS
SaveExploits1References1
CVE
CVE
added 2020/02/26 3:28 p.m.53 views

CVE-2020-8951

CVE-2020-8951 affects Fiserv Accurate Reconciliation 2.19.0, where a vulnerability exists in the Configuration Manager’s Source/Destination (Configuration Parameter Translation) fields that can be manipulated to perform cross‑site scripting (XSS). The issue is fixed in version 3.0.0 or higher. Th...

5.4CVSS5.2AI score0.00637EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/02/26 3:27 p.m.24 views

CVE-2020-8952

Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...

6AI score0.00734EPSS
SaveExploits1References1
CVE
CVE
added 2020/02/26 3:27 p.m.51 views

CVE-2020-8952

CVE-2020-8952 affects Fiserv Accurate Reconciliation version 2.19.0. The vulnerability is an XSS issue exposed via the logout.jsp timeOut parameter. The issue is mitigated by upgrading to version 3.0.0 or higher. Public references in the connected documents corroborate the vendor/Red Hat/NVD entr...

6.1CVSS5.9AI score0.00734EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2018/03/19 2:48 a.m.32 views

CVE-2018-1078

It was found that all flows, including active and inactive, in the config datastore are installed back in the switch upon reconnection, as part of the node reconciliation process in OpenDayLight. This may lead to denial of service via table overflow or possibly circumventing of the controller's...

9.8CVSS3.2AI score0.01231EPSS
SaveExploits0References1
OSV
OSV
added 2018/03/16 8:29 p.m.6 views

CVE-2018-1078

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired...

9.8CVSS5.8AI score
SaveExploits0References2
NVD
NVD
added 2018/03/16 8:29 p.m.22 views

CVE-2018-1078

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired...

9.8CVSS9.4AI score0.01231EPSS
SaveExploits0References2
Prion
Prion
added 2018/03/16 8:29 p.m.19 views

Code injection

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired...

7.5CVSS9.3AI score0.01231EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/03/16 8:0 p.m.61 views

CVE-2018-1078

CVE-2018-1078 affects OpenDayLight Carbon SR3 and earlier. During node reconciliation, all flows (active and inactive) may be reinstalled in the switch upon reconnection, causing timers for those flows to be reset. This can result in traffic flows that should be expired (or expiring soon) being r...

9.8CVSS9.3AI score0.01231EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/03/16 8:0 p.m.40 views

CVE-2018-1078

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should be expired or should expire shortly being re-installed and their timers reset resulting in traffic being allowed that should be expired...

9.4AI score0.01231EPSS
SaveExploits0References2
Cisco Threats
Cisco Threats
added 2018/02/05 4:24 p.m.27 views

Threat Outbreak Alert RuleID31903: Email Messages Distributing Malicious Software on February 5, 2018

Medium Alert ID: 56663 First Published: 2018 February 5 16:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31903 may contain the following files: Name |...

0.2AI score
SaveExploits0
CNVD
CNVD
added 2018/01/19 12:0 a.m.6 views

Unspecified Vulnerability in Oracle Financial Services Analytical Applications Reconciliation Framework Component

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management.Oracle Financial Services Analytical Applications Reconciliation Framework is one of the financial services analytical framework. A security...

6.1CVSS6.7AI score0.01125EPSS
SaveExploits0References1
NVD
NVD
added 2018/01/18 2:29 a.m.19 views

CVE-2018-2732

Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with...

6.1CVSS5.4AI score0.01125EPSS
SaveExploits0References3
OSV
OSV
added 2018/01/18 2:29 a.m.7 views

CVE-2018-2732

Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with...

6.1CVSS7.3AI score
SaveExploits0References3
Prion
Prion
added 2018/01/18 2:29 a.m.16 views

Buffer overflow

Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with...

5.8CVSS5.7AI score0.01125EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2018/01/18 2:0 a.m.49 views

CVE-2018-2732

CVE-2018-2732 refers to a vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework, specifically the User Interface subcomponent, affected in version 8.0.x. The connected sources describe an unauthenticated, network-accessible issue exploitable via HTTP, wit...

6.1CVSS5.6AI score0.01125EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/01/18 2:0 a.m.18 views

CVE-2018-2732

Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with...

5.8AI score0.01125EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2018/01/18 2:0 a.m.10 views

CVE-2018-2732

Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with...

6.2AI score0.01125EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.8 views

The vulnerability of the Internet Explorer browser allows attackers to gain unauthorized access to transmitted data.

The Internet Explorer browser contains a vulnerability related to improper certificate reconciliation during a TLS session. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to data by intercepting the TLS connection that involves mutual authentication between the...

6.8CVSS5.6AI score0.07556EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.40 views

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

These updated packages fix the following security issues : - A security flaw was found in the Linux kernel memory copy routines, when running on certain AMD64 systems. If an unsuccessful attempt to copy kernel memory from source to destination memory locations occurred, the copy routines did not...

7.2CVSS7.2AI score0.0057EPSS
SaveExploits3References4
Rows per page
Query Builder