Lucene search
+L

151 matches found

Prion
Prion
•added 2017/10/19 5:29 p.m.•21 views

Buffer overflow

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

3.5CVSS2.1AI score0.0078EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2017/10/19 5:00 p.m.•69 views

CVE-2017-10014

CVE-2017-10014 affects the Oracle Hospitality Hotel Mobile component (Suite8/RESTAPI), version 1.1. The vulnerability arises in Oracle Hospitality Applications, allowing a low-privilege attacker with network access via HTTP to potentially modify data, with the attack requiring user interaction. I...

3.5CVSS3.1AI score0.0078EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/19 12:00 a.m.•8 views

CVE-2017-10353: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

7.1CVSS6.8AI score0.01527EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/19 12:00 a.m.•8 views

CVE-2017-10014: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

3.5CVSS5.5AI score0.0078EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2017/10/16 3:00 p.m.•44 views

CVE-2014-7851

oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user...

7.5AI score0.01002EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/16 12:00 a.m.•4 views

CVE-2014-7851: Undefined Security Weakness

oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user...

7.5CVSS7.3AI score0.01002EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/08/10 12:00 a.m.•16 views

Oracle Hospitality Hotel Mobile Unauthorized Modification Vulnerability (CNVD-2017-28231)

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hotel management from Oracle. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer satisfaction, etc...

4.3CVSS5.1AI score0.01339EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/08 12:00 a.m.•5 views

CVE-2017-10133: Undefined Security Weakness

Vulnerability in the Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RestAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Hotel...

4.3CVSS5.8AI score0.01339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/08/08 12:00 a.m.•2 views

PT-2017-11129

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 1.1 Description The issue affects the Hospitality Hotel Mobile component, specifically the Suite8/RestAPI subcomponent. It allows a low-privileged attacker with network access via HTTP to compromise...

4.3CVSS0.01339EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2017/01/15 2:59 a.m.•69 views

CVE-2017-5487

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request...

5.3CVSS6.9AI score0.87299EPSS
SaveExploits9References8
Veeam
Veeam
•added 2016/01/18 12:00 a.m.•26 views

RestAPI requests to tenant entities fail with "Specified cast is not valid" error

After upgrading Enterprise Manager and Backup server to version 9, RestAPI requests to tenant entities fail with "Specified cast is not valid" error...

3.1AI score
SaveExploits0
Rows per page
Query Builder