Lucene search
+L

2636 matches found

securityvulns
securityvulns
•added 2013/08/14 12:00 a.m.•67 views

Microsoft Exchange Oracle libraries security vulnerabilities

Outlook Web Access vulnerabilities because of vulnerable Oracle Outside In libraries...

6.8CVSS2.4AI score0.01732EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2013/08/14 12:00 a.m.•51 views

MS13-061: Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2876063)

The version of Microsoft Exchange installed on the remote host uses a version of the Oracle Outside In libraries, which are affected by the following vulnerabilities : - Two unspecified code execution vulnerabilities exist in the WebReady Document Viewing feature of Outlook Web Access...

6.8CVSS6.1AI score0.01732EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2013/07/17 12:00 a.m.•5 views

PT-2013-4620

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.3.7 through 8.4.1 Exchange Server 2013 affected versions not specified Description The issue affects the availability of the system. In the case of Exchange Server 2013, the vulnerability is related to the...

6.8CVSS0.01385EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2013/07/17 12:00 a.m.•4 views

PT-2013-4615

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.3.7 through 8.4.1 Exchange Server 2007 Exchange Server 2010 Exchange Server 2013 Description The issue allows attackers to affect availability or execute remote code, depending on the context. For Exchange...

6.8CVSS0.01732EPSS
SaveExploits0References14
securityvulns
securityvulns
•added 2013/07/15 12:00 a.m.•75 views

ASUS RT-N66U Router - HTTPS Directory traversal and full file access and credential disclosure vuln

Vulnerable product: ASUS RT-N66U when HTTPS WebService via AiCloud is enabled AC66R and RT-N65U are effected as well, but need more testing Vulnerabilities: - Linux 2.6.22 - Researched on both 3.0.0.4.270 and 3.0.0.4.354 firmware - Full directory traversal and plain text disclosure of all sensiti...

7.2AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2013/06/13 7:11 a.m.•20 views

Iranian Gmail users targeted by politically motivated phishing attack

Google says tens of thousands of Gmail accounts belonging to Iranian users have been targeted in an politically motivated hacking campaign in the weeks leading up to the country's closely watched presidential elections. For the last three weeks, the search giant said it has "detected and disrupte...

6.9AI score
SaveExploits0
Veeam
Veeam
•added 2013/04/29 12:00 a.m.•35 views

Patch 3 Release Notes for Veeam Backup & Replication 6.5

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge These are the issues resolved by the Patch 3 for Veeam Backup version 6.5.0.106 / 6.5.0.109 / 6.5.0.128. This patch is cumulative and contains fixes from Pat...

6.8AI score
SaveExploits0Affected Software1
NVD
NVD
•added 2013/04/17 5:55 p.m.•25 views

CVE-2013-2405

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Access...

5.5CVSS5.1AI score0.0095EPSS
SaveExploits0References2
NVD
NVD
•added 2013/04/17 5:55 p.m.•28 views

CVE-2013-2411

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote attackers to affect integrity via unknown vectors related to Web Access...

4.3CVSS5.8AI score0.01024EPSS
SaveExploits0References2
Prion
Prion
•added 2013/04/17 5:55 p.m.•21 views

Design/Logic Flaw

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote attackers to affect integrity via unknown vectors related to Web Access...

4.3CVSS6.3AI score0.01024EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2013/04/17 5:55 p.m.•18 views

Code injection

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Access...

5.5CVSS5.5AI score0.0095EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2013/04/17 2:00 p.m.•30 views

CVE-2013-2411

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote attackers to affect integrity via unknown vectors related to Web Access...

5.8AI score0.01024EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2013/04/17 2:00 p.m.•40 views

CVE-2013-2405

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Access...

5.1AI score0.0095EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/04/17 12:00 a.m.•3 views

PT-2013-3740

Name of the Vulnerable Software and Affected Versions Oracle Primavera Products Suite versions 7.0 through 8.2 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Web Access. Recommendations For versions 7.0...

5.5CVSS0.0095EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2013/04/17 12:00 a.m.•2 views

PT-2013-3746

Name of the Vulnerable Software and Affected Versions Oracle Primavera Products Suite versions 7.0 through 8.2 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Web Access in the Primavera P6 Enterprise Project...

4.3CVSS0.01024EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/04/17 12:00 a.m.•6 views

CVE-2013-2411: Undefined Security Weakness

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote attackers to affect integrity via unknown vectors related to Web Access...

4.3CVSS6AI score0.01024EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/04/17 12:00 a.m.•8 views

CVE-2013-2405: Undefined Security Weakness

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Access...

5.5CVSS6AI score0.0095EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2013/04/17 12:00 a.m.•5 views

PT-2013-3728

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.3.7 through 8.4.0 Exchange Server 2007 Exchange Server 2010 Exchange Server 2013 Description The issue allows attackers to affect availability or execute remote code, depending on the context. For Exchange...

1.5CVSS0.00313EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/02/28 4:37 a.m.•21 views

dopvCOMET* vulnerable to cross-site scripting

Overview dopvCOMET provided by bayashi.net is a software to analyze web access logs. dopvCOMET contains a cross-site scripting vulnerability. Masahiro YAMADA reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...

4.3CVSS6AI score0.01148EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/02/28 12:00 a.m.•57 views

JVN#36339873: dopvSTAR* vulnerable to cross-site scripting

dopvSTAR provided by bayashi.net is a software to analyze web access logs. dopvSTAR contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Modify the JavaScript Modify the JavaScript that enables to log accesses, according to...

4.3CVSS5.8AI score0.01148EPSS
SaveExploits0
Rows per page
Query Builder