Lucene search
K

30 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/20 3:51 p.m.4 views

Malicious code in megabank-worklist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f0a379223d486978f097d6f97b1d3a1fd307bb725be56c7baa2bc8ff72d297 The package megabank-worklist was found to contain malicious code. Source: ossf-package-analysis...

5.7AI score
Exploits0
OSV
OSV
added 2026/04/20 3:51 p.m.4 views

MAL-2026-2955 Malicious code in megabank-worklist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f0a379223d486978f097d6f97b1d3a1fd307bb725be56c7baa2bc8ff72d297 The package megabank-worklist was found to contain malicious code. Source: ossf-package-analysis...

5.7AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-7192

Malware in sbrugna...

6.8CVSS6.4AI score0.0556EPSS
Exploits1References12
CNNVD
CNNVD
added 2025/03/13 12:0 a.m.0 views

Santesoft Sante PACS Server 安全漏洞

Santesoft Sante PACS Server is a DICOM 3.0 compliant PACS server, Modality Worklist server, HTTP Web server for DICOM files, and CD/DVD burning and printing server from Santesoft Cyprus. Used to store, archive, manage, view and burn medical images. A security vulnerability exists in Santesoft San...

7.5CVSS6.6AI score0.05673EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/30 12:0 a.m.3 views

Sante PACS Server 缓冲区错误漏洞

Santesoft Sante PACS Server is a DICOM 3.0 compliant PACS server, Modality Worklist server, HTTP Web server for DICOM files, and CD/DVD burning and printing server from Santesoft, Cyprus. It is used to store, archive, manage, view and burn medical images. A buffer error vulnerability exists in...

7.5CVSS7.6AI score0.0093EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/01 12:0 a.m.3 views

Santesoft Sante PACS Server 安全漏洞

Santesoft Sante PACS Server is a DICOM 3.0 compliant PACS server, Modality Worklist server, HTTP Web server for DICOM files, and CD/DVD burning and printing server from Santesoft Cyprus. Used to store, archive, manage, view and burn medical images. A security vulnerability exists in Santesoft San...

9.8CVSS9.6AI score0.01134EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:0 a.m.3 views

The vulnerability of the Worklist sub-component of the Workflow component in the Oracle E-Business Suite allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Worklist sub-component of the Workflow component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the...

7.8CVSS7.3AI score0.00772EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/07/19 10:15 p.m.2 views

CVE-2022-21567

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of...

7.5CVSS7.3AI score0.00772EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/19 10:15 p.m.3 views

CVE-2022-21567

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of...

7.5CVSS7.2AI score0.00772EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2022/07/19 10:15 p.m.16 views

Design/Logic Flaw

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of...

5CVSS7.3AI score0.00772EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/07/19 12:0 a.m.3 views

Oracle E-Business Suite 输入验证错误漏洞

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Workflow E-Business Suite is one...

7.5CVSS7.6AI score0.00772EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/07/19 12:0 a.m.3 views

PT-2022-4565 · Oracle · Oracle Workflow +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.11 Description: The issue exists due to insufficient input validation in the Worklist component of the Oracle Workflow product. This allows a remote attacker to gain unauthorized access to...

7.8CVSS9.1AI score0.00772EPSS
Exploits0References5
VulnCheck KEV
VulnCheck KEV
added 2022/06/09 12:0 a.m.4 views

VulnCheck KEV: CVE-2016-2388

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request...

5.3CVSS6.4AI score0.51553EPSS
Exploits10References1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.1 views

The vulnerability of the Worklist component of the Oracle Workflow system allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Worklist component of the Oracle Workflow system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information, or to modify, add, or delete data using the HTTP...

8.2CVSS7.7AI score0.01169EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/01/20 2:50 p.m.61 views

CVE-2021-2015

CVE-2021-2015 affects Oracle E-Business Suite, specifically the Oracle Workflow component (Worklist). Affected versions are 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Workflow, with exploitation requiring user interaction...

8.2CVSS8.4AI score0.01169EPSS
Exploits0References1Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:0 a.m.4 views

The vulnerability of the Worklist sub-component of the Oracle Workflow component in the Oracle E-Business Suite automation system allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Worklist sub-component of the Oracle Workflow component in the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to modify, add, or delete data, or gain...

4.3CVSS6.1AI score0.01218EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2019/10/16 6:15 p.m.4 views

CVE-2019-2925

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...

4.3CVSS6.6AI score0.01218EPSS
Exploits0References1
Symantec
Symantec
added 2019/10/15 12:0 a.m.24 views

Oracle E-Business Suite CVE-2019-2925 Remote Security Vulnerability

Description Oracle E-Business Suite is prone to a remote vulnerability in Oracle Workflow. The vulnerability can be exploited over the 'HTTP' protocol. The 'Worklist' component is affected. This vulnerability affects the following supported versions: 2.1.3, 12.2.3 through 12.2.8 Technologies...

1.3AI score0.01218EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2018/01/18 2:29 a.m.2 views

CVE-2018-2644

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Worklist. Supported versions that are affected are 7.x, 8.0.x and 8.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus...

6.1CVSS5.8AI score
Exploits0References2
CNVD
CNVD
added 2018/01/17 12:0 a.m.3 views

Unspecified Vulnerability in Oracle Argus Safety (CNVD-2018-02385)

Oracle Argus Safety is a complete pharmacovigilance software system designed to address the pharmaceutical industry's toughest regulatory challenges. An unspecified vulnerability exists in the Worklist component of Oracle Argus Safety. An attacker could exploit the vulnerability to compromise...

6.1CVSS6.7AI score0.00858EPSS
Exploits0References1
Rows per page
Query Builder