Lucene search
+L

5393 matches found

Prion
Prion
added 2020/01/15 5:15 p.m.24 views

Buffer overflow

Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems component: Templates. The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Server for SPARC executes to compromise...

1.9CVSS3.4AI score0.00427EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/01/15 4:34 p.m.64 views

CVE-2020-2571

CVE-2020-2571 affects Oracle VM Server for SPARC (Templates), with vulnerability resting in version 3.6. The flaw can be triggered by a locally present attacker who has logon to the infrastructure and requires user interaction to exploit, potentially leading to unauthorized updates or reads in Or...

3.3CVSS3.4AI score0.00427EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/01/15 4:34 p.m.11 views

CVE-2020-2571

Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems component: Templates. The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Server for SPARC executes to compromise...

3.3CVSS5.1AI score0.00427EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/15 4:34 p.m.38 views

CVE-2020-2571

Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems component: Templates. The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Server for SPARC executes to compromise...

3.3CVSS3.5AI score0.00427EPSS
SaveExploits0References1
Symantec
Symantec
added 2020/01/14 12:00 a.m.39 views

Oracle VM Server for SPARC CVE-2020-2571 Local Security Vulnerability

Description Oracle VM Server for SPARC is prone to a local security vulnerability. The 'Templates' component is affected. This vulnerability affects the following supported versions: Oracle VM Server for SPARC 3.6 Technologies Affected Oracle VM Server for SPARC 3.6 Recommendations Permit local...

2AI score0.00427EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/12/30 5:15 p.m.6 views

DEBIAN-CVE-2019-17558

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset velocity/ directory or as a parameter. A user defined configset could contain renderable, potentially...

7.5CVSS8.3AI score0.98567EPSS
SaveExploits14References1
OSV
OSV
added 2019/12/30 5:15 p.m.9 views

UBUNTU-CVE-2019-17558

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset velocity/ directory or as a parameter. A user defined configset could contain renderable, potentially...

7.5CVSS7.2AI score0.98567EPSS
SaveExploits14References6
UbuntuCve
UbuntuCve
added 2019/12/30 5:15 p.m.41 views

CVE-2019-17558

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset velocity/ directory or as a parameter. A user defined configset could contain renderable, potentially...

7.5CVSS7AI score0.98567EPSS
SaveExploits14References5
Vulnrichment
Vulnrichment
added 2019/12/30 4:36 p.m.12 views

CVE-2019-17558

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset velocity/ directory or as a parameter. A user defined configset could contain renderable, potentially...

7.7AI score0.98567EPSS
SaveExploits14References29
Cvelist
Cvelist
added 2019/12/30 4:36 p.m.33 views

CVE-2019-17558

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset velocity/ directory or as a parameter. A user defined configset could contain renderable, potentially...

7.7AI score0.98567EPSS
SaveExploits14References29
Positive Technologies
Positive Technologies
added 2019/12/30 12:00 a.m.10 views

PT-2019-5683 · Apache +1 · Apache Solr +1

Name of the Vulnerable Software and Affected Versions: Apache Solr versions 5.0.0 through 8.3.1 Description: The issue is related to insufficient input validation in the VelocityResponseWriter component of Apache Solr, allowing for remote code execution. A Velocity template can be provided throug...

8.5CVSS8.8AI score0.98567EPSS
SaveExploits14References85
Hacker One
Hacker One
added 2019/12/28 1:07 a.m.103 views

Stripo Inc: my.stripo.emai email verification bypassed and also create email templates

Summary: According to the Stripo.emai When the new user sign up Stripo.email allow to create email templates after the verification of the email of Your stripo account. Until your email get verified You are not able to create a email templates in your acc. User need to verified their email...

1.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2019/12/23 12:41 p.m.86 views

The Best Templates for Posting Cybersecurity Jobs

The cybersecurity of a company is heavily reliant upon the skills and knowledge of the people who install, manage, and operate its security products. This means that recruiting and nurturing the best security team possible should be a CISO's top priority. Cynet's Ultimate Cybersecurity Job Postin...

7.4AI score
SaveExploits0
The Hacker News
The Hacker News
added 2019/12/23 12:41 p.m.13 views

The Best Templates for Posting Cybersecurity Jobs

The cybersecurity of a company is heavily reliant upon the skills and knowledge of the people who install, manage, and operate its security products. This means that recruiting and nurturing the best security team possible should be a CISO's top priority. Cynet's Ultimate Cybersecurity Job Postin...

5.8AI score
SaveExploits0
Prion
Prion
added 2019/12/20 11:15 p.m.28 views

Remote code execution

Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's proto and defineGetter properties, which may allow an attacker to execute arbitrary code through crafted payloads...

7.5CVSS9.7AI score0.07066EPSS
SaveExploits0References2Affected Software2
Debian CVE
Debian CVE
added 2019/12/20 10:50 p.m.35 views

CVE-2019-19919

Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's proto and defineGetter properties, which may allow an attacker to execute arbitrary code through crafted payloads...

9.8CVSS8.5AI score0.07066EPSS
SaveExploits0
NVD
NVD
added 2019/12/19 12:15 a.m.16 views

CVE-2019-19899

Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism intended to block access to instances of java.lang.Class because getClass is accessible via the public static java.lang.Class java.lang.Class.forNamejava.lang.Module,java.lang.String signature...

9.8CVSS9.4AI score0.01277EPSS
SaveExploits1References1
OSV
OSV
added 2019/12/19 12:15 a.m.15 views

CVE-2019-19899

Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism intended to block access to instances of java.lang.Class because getClass is accessible via the public static java.lang.Class java.lang.Class.forNamejava.lang.Module,java.lang.String signature...

9.8CVSS6.8AI score
SaveExploits0References1
Prion
Prion
added 2019/12/19 12:15 a.m.17 views

Design/Logic Flaw

Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism intended to block access to instances of java.lang.Class because getClass is accessible via the public static java.lang.Class java.lang.Class.forNamejava.lang.Module,java.lang.String signature...

7.5CVSS9.3AI score0.01277EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2019/12/19 12:00 a.m.13 views

Pebble Templates Security Bypass Vulnerability

Pebble Templates is a Java template engine . A security vulnerability exists in Pebble Templates version 3.1.2. The vulnerability can be exploited to bypass the protection mechanism blocking access to java.lang.Class instances with the help of the public static java.lang.Class...

9.8CVSS6.8AI score0.01277EPSS
SaveExploits1References1
Rows per page
Query Builder