Lucene search
+L

442 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•7 views

CVE-2016-3114: Undefined Security Weakness

Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access...

6.5CVSS5.8AI score0.00852EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•3 views

CVE-2016-6903: Undefined Security Weakness

lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands...

9.9CVSS6.2AI score0.0498EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/17 12:00 a.m.•8 views

CVE-2016-4867: Exposure of Sensitive Information to an Unauthorized Actor

Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project function...

4.3CVSS5.8AI score0.01366EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/18 12:00 a.m.•6 views

CVE-2016-3401: Undefined Security Weakness

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote authenticated users to affect integrity via unknown vectors, aka bug 99810...

6.5CVSS5.8AI score0.01718EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/25 12:00 a.m.•4 views

CVE-2016-8286: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows remote authenticated users to affect confidentiality via vectors related to Server: Security: Privileges...

3.5CVSS8.3AI score0.01879EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/03 12:00 a.m.•4 views

CVE-2016-7570: Undefined Security Weakness

Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes...

4.3CVSS5.8AI score0.01678EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/21 12:00 a.m.•4 views

CVE-2016-3433: Undefined Security Weakness

Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to Analytics Web Administration...

5.4CVSS6.5AI score0.01202EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/21 12:00 a.m.•3 views

CVE-2016-3538: Undefined Security Weakness

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3539...

7.5CVSS7AI score0.0265EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/21 12:00 a.m.•7 views

CVE-2016-3539: Undefined Security Weakness

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3538...

7.5CVSS7AI score0.0265EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/08 12:00 a.m.•7 views

CVE-2016-0314: Undefined Security Weakness

The Report Builder and Data Collection Component DCC in IBM Jazz Reporting Service JRS 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allow remote authenticated users to conduct clickjacking attacks via unspecified vectors...

6.5CVSS7AI score0.00884EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/04/21 12:00 a.m.•8 views

CVE-2016-3442: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Portal...

5.4CVSS6AI score0.01069EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/01/21 12:00 a.m.•7 views

CVE-2016-0556: Undefined Security Weakness

Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Administration, a different vulnerability than...

5.5CVSS6AI score0.01412EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/10/21 12:00 a.m.•5 views

CVE-2015-4836: Undefined Security Weakness

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : SP...

2.8CVSS6.6AI score0.03974EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/10/21 12:00 a.m.•4 views

CVE-2015-4913: Undefined Security Weakness

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML, a different vulnerability than CVE-2015-4858...

3.5CVSS6.6AI score0.03548EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/10/21 12:00 a.m.•5 views

CVE-2015-4862: Undefined Security Weakness

Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to DML...

4CVSS6.8AI score0.02293EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/10/21 12:00 a.m.•7 views

CVE-2015-4864: Undefined Security Weakness

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges...

3.5CVSS6.8AI score0.02388EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/10/21 12:00 a.m.•4 views

CVE-2015-4894: Undefined Security Weakness

Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server 10.3.0.3, 11.3.0.2, and 12.1.0.0 allows remote authenticated users to affect integrity and availability via unknown vectors...

4.9CVSS5.9AI score0.01641EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/08/26 12:00 a.m.•8 views

CVE-2015-5413: Undefined Security Weakness

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to gain privileges and obtain sensitive information via unspecified vectors...

4CVSS5.8AI score0.01728EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/08/14 12:00 a.m.•4 views

CVE-2015-1844: Undefined Security Weakness

Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting through the REST API...

4CVSS5.9AI score0.01925EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/16 12:00 a.m.•5 views

CVE-2015-4741: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.2.4 allows remote authenticated users to affect integrity via unknown vectors related to Dialog popup...

3.5CVSS6AI score0.01172EPSS
SaveExploits0References1
Rows per page
Query Builder