Lucene search
+L

4885 matches found

attackerkb
attackerkb
•added 2021/01/20 3:15 p.m.•10 views

CVE-2021-2104

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7AI score0.01271EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/01/20 3:15 p.m.•10 views

CVE-2021-2103

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7AI score0.01271EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2021/01/20 3:15 p.m.•27 views

Design/Logic Flaw

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

5.8CVSS8.3AI score0.01271EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/01/20 2:50 p.m.•71 views

CVE-2021-2103

CVE-2021-2103 affects Oracle’s Complex Maintenance, Repair, and Overhaul (dialog box) in Oracle Supply Chain. Affected versions: 11.5.10, 12.1, 12.2. The issue allows an unauthenticated attacker with network access via HTTP to compromise the system; exploitation requires human interaction. Impact...

8.2CVSS8.3AI score0.01271EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2021/01/20 2:50 p.m.•17 views

CVE-2021-2104

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7.3AI score0.01271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2021/01/20 2:50 p.m.•16 views

CVE-2021-2102

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7.3AI score0.01271EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/20 2:50 p.m.•78 views

CVE-2021-2102

The CVE-2021-2102 issue is in Oracle Complex Maintenance, Repair, and Overhaul (Dialog Box) for versions 11.5.10, 12.1, 12.2. It stems from insufficient access control, enabling an unauthenticated, network-accessible attacker (via HTTP) to access or modify data after user interaction. The Red Hat...

8.2CVSS8.3AI score0.01271EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2021/01/20 2:50 p.m.•28 views

CVE-2021-2103

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS7.3AI score0.01271EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/01/20 2:50 p.m.•39 views

CVE-2021-2104

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS8.4AI score0.01271EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•6 views

CVE-2021-2103: Undefined Security Weakness

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS5.7AI score0.01271EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•5 views

CVE-2021-2104: Undefined Security Weakness

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS5.7AI score0.01271EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•7 views

CVE-2021-2102: Undefined Security Weakness

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

8.2CVSS5.7AI score0.01271EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•15 views

PT-2021-1742 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 11.5.10, 12.1, 12.2 Description: The issue is related to insufficient access control in the Dialog Box component of the Oracle Complex Maintenance, Repair, and Overhaul product. This...

8.2CVSS8.7AI score0.01271EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•20 views

PT-2021-1774 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 11.5.10, 12.1, and 12.2 Description: The issue is related to insufficient access control in the Dialog Box component of the Oracle Complex Maintenance, Repair, and Overhaul product. It...

8.2CVSS8.6AI score0.01271EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•24 views

Oracle Dialog Box Security Vulnerability

Oracle Dialog Box is the United States Oracle Oracle company can generate a dialog box Windows API functions. This file exists in many Oracle products and provides dialog box support for the products. A security vulnerability exists in Oracle Dialog Box, which arises from unauthorized full access...

8.2CVSS5.8AI score0.01271EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•23 views

Oracle Dialog Box Security Vulnerability

Oracle Dialog Box is the United States Oracle Oracle company can generate a dialog box Windows API functions. This file exists in many Oracle products and provides dialog box support for the products. A security vulnerability exists in Oracle Dialog Box that could allow an unauthenticated attacke...

8.2CVSS7.3AI score0.01271EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/01/16 12:00 a.m.•33 views

ZTE ZXV10 B860A Information Disclosure Vulnerability

The ZTE ZXV10 B860A is a network set-top box from China's ZTE Corporation ZTE. The ZTE ZXV10 B860A suffers from an information disclosure vulnerability that stems from the device not adequately validating logs, which can be exploited by an attacker to gain access to sensitive user information for...

4.4CVSS6.5AI score0.00394EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/01/14 4:15 p.m.•27 views

CVE-2021-21722

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

4.4CVSS5.8AI score0.00394EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/14 4:15 p.m.•12 views

CVE-2021-21722

A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-TV0032.1.1.04jiangsuTelecom...

4.4CVSS5.8AI score0.00394EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/01/14 12:00 a.m.•22 views

ZTE ZXV10 B860A log information leakage vulnerability

The ZTE ZXV10 B860A is a network set-top box from China's ZTE Corporation ZTE. The ZTE ZXV10 B860A suffers from an information disclosure vulnerability that stems from the device not adequately validating logs, which can be exploited by an attacker to gain access to sensitive user information for...

4.4CVSS5.8AI score0.00394EPSS
SaveExploits0References2
Rows per page
Query Builder