Lucene search
+L

1889 matches found

Cvelist
Cvelist
added 2022/11/09 12:00 a.m.37 views

CVE-2022-39890

Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information...

6.2CVSS7.7AI score0.00441EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/09 12:00 a.m.9 views

PT-2022-25083 · Samsung · Samsung Billing

Name of the Vulnerable Software and Affected Versions: Samsung Billing versions prior to 5.0.56.0 Description: The issue is related to improper authorization, allowing an attacker to obtain sensitive information. Recommendations: For versions prior to 5.0.56.0, update to version 5.0.56.0 or later...

7.5CVSS7.3AI score0.00441EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/11/09 12:00 a.m.11 views

Samsung Billing 安全漏洞

SAMSUNG Billing is a behind-the-scenes payment service application from the South Korean company Samsung. A security vulnerability exists in Samsung Billing versions prior to 5.0.56.0, which stems from improper authorization and can be exploited by an attacker to gain access to sensitive...

7.5CVSS7.3AI score0.00441EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/11/09 12:00 a.m.8 views

CVE-2022-39890

Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information...

6.2CVSS6.7AI score0.00441EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/09 12:00 a.m.72 views

CVE-2022-39890

Samsung Billing is affected by CVE-2022-39890 due to improper authorization, enabling access to sensitive information in versions prior to 5.0.56.0. The vulnerability root cause is improper access control within the billing component, with privacy impact; CVSS metrics indicate Confidentiality imp...

7.5CVSS7.4AI score0.00441EPSS
SaveExploits0References1Affected Software1
NCSC
NCSC
added 2022/10/19 12:00 a.m.50 views

Vulnerabilities fixed in Oracle Communications Applications

Vulnerabilities have been fixed in Oracle Communications Applications. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data Access to...

10CVSS7.8AI score0.97906EPSS
SaveExploits37
ATTACKERKB
ATTACKERKB
added 2022/10/18 9:15 p.m.9 views

CVE-2022-21601

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Connection Manager. Supported versions that are affected are 12.0.0.4.0-12.0.0.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

6.5CVSS6.9AI score0.00648EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/10/18 9:15 p.m.12 views

CVE-2022-21601

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Connection Manager. Supported versions that are affected are 12.0.0.4.0-12.0.0.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

6.5CVSS5.8AI score0.00648EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/18 9:15 p.m.33 views

CVE-2022-21601

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Connection Manager. Supported versions that are affected are 12.0.0.4.0-12.0.0.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

6.5CVSS0.00648EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/18 9:15 p.m.29 views

Design/Logic Flaw

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Connection Manager. Supported versions that are affected are 12.0.0.4.0-12.0.0.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

6.4CVSS5.9AI score0.00648EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/10/18 2:15 p.m.11 views

CVE-2022-41504

An arbitrary file upload vulnerability in the component /phpaction/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS6AI score0.01119EPSS
SaveExploits1References1
NVD
NVD
added 2022/10/18 2:15 p.m.24 views

CVE-2022-41504

An arbitrary file upload vulnerability in the component /phpaction/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS0.01119EPSS
SaveExploits1References1
Prion
Prion
added 2022/10/18 2:15 p.m.23 views

Privilege escalation

An arbitrary file upload vulnerability in the component /phpaction/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

5.8CVSS7.3AI score0.01119EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/18 12:00 a.m.12 views

PT-2022-25898 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: The issue is related to an arbitrary file upload vulnerability in the component /php action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP...

7.2CVSS7.3AI score0.01119EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/10/18 12:00 a.m.12 views

CVE-2022-41504

An arbitrary file upload vulnerability in the component /phpaction/editProductImage.php of Billing System Project v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.2AI score0.01119EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/10/18 12:00 a.m.10 views

Billing System Project 代码问题漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. A security vulnerability exists in Billing System Project v1.0, which stems from an arbitrary file upload vulnerability found in component /phpaction/editProductImage. An attacker can exploit this vulnerability ...

7.2CVSS7.5AI score0.01119EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/10/18 12:00 a.m.32 views

CVE-2022-21601

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Connection Manager. Supported versions that are affected are 12.0.0.4.0-12.0.0.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

6.5CVSS6.1AI score0.00648EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/10/18 12:00 a.m.11 views

Oracle Communications Billing and Revenue Management 安全漏洞

Oracle Communications Billing and Revenue Management is a communications billing and revenue management system from Oracle that provides a fully converged, real-time enterprise revenue management application. This unified platform manages, maximizes, and converts each revenue stream into revenue...

6.5CVSS7.7AI score0.00648EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/10/18 12:00 a.m.11 views

CVE-2022-21601

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Connection Manager. Supported versions that are affected are 12.0.0.4.0-12.0.0.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

6.5CVSS6.2AI score0.00648EPSS
SaveExploits0References1
CVE
CVE
added 2022/10/18 12:00 a.m.81 views

CVE-2022-21601

CVE-2022-21601 affects Oracle Communications Billing and Revenue Management (OCBRM) when using the Connection Manager. Affected versions are 12.0.0.4.0 through 12.0.0.7.0. The vulnerability allows an unauthenticated attacker over TCP to read restricted data and cause a partial denial of service. ...

6.5CVSS5.9AI score0.00648EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder