Lucene search
+L

505 matches found

BDU FSTEC
BDU FSTEC
added 2019/02/05 12:00 a.m.9 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected data.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected data...

6.5CVSS7AI score0.00503EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2019/02/04 9:00 p.m.25 views

CVE-2019-1000017

Chamilo Chamilo-lms version 1.11.8 and earlier contains an Incorrect Access Control vulnerability in Tickets component that can result in an authenticated user can read all tickets available on the platform, due to lack of access controls. This attack appears to be exploitable via ticketid=ticket...

6.5AI score0.00962EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:00 a.m.11 views

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to disclose protected information.

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to security mechanism failures. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information using the HTTP protocol...

5.3CVSS6.2AI score0.01547EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/30 12:00 a.m.6 views

The vulnerability of the Server component of the Oracle MySQL database management system allows a hacker to gain unauthorized access to protected data.

The vulnerability of the Server component of the Oracle MySQL database management system is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data using network protocols...

6.8CVSS6.6AI score0.01615EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:00 a.m.15 views

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain full control over the application.

The vulnerability of the Core component in Oracle VM VirtualBox is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.6CVSS7.7AI score0.00722EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:00 a.m.16 views

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain full control over the application.

The vulnerability of the Core component in Oracle VM VirtualBox is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.8CVSS7.5AI score0.00502EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:00 a.m.18 views

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain full control over the application.

The vulnerability of the Core component in Oracle VM VirtualBox is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.6CVSS7.7AI score0.00722EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/01/16 7:30 p.m.5 views

CVE-2019-2511

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle VM...

7.5CVSS7.1AI score0.04255EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:00 a.m.12 views

The vulnerability of the Wizard component in the microprogramming software of the RICOH MP multifunctional device allows a hacker to inject any code into the protected web page.

The vulnerability of the Wizard component file /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into...

6.1CVSS6.5AI score0.01EPSS
SaveExploits3References5
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:00 a.m.27 views

The vulnerability of the Wizard component in the microprogramming software of the RICOH MP C6003 multifunctional device allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Wizard /web/entry/en/address/adrsSetUserWizard.cgi component of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the...

6.1CVSS6.3AI score0.01EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:00 a.m.12 views

The vulnerability of the Wizard component in the microprogramming software of the RICOH MP multifunctional device allows a hacker to inject any code into the protected web page.

The vulnerability of the Wizard component file /web/entry/en/address/adrsSetUserWizard.cgi of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into...

6.1CVSS6.5AI score0.01EPSS
SaveExploits3References5
CNVD
CNVD
added 2018/12/06 12:00 a.m.8 views

Joomla Content Editor Com_JCE Component Information Disclosure Vulnerability

Joomla is an open source content management system CMS. An information disclosure vulnerability exists in the Joomla Content Editor ComJCE component. An attacker can exploit the vulnerability to obtain database backup information...

6.3AI score
SaveExploits0References1
Cvelist
Cvelist
added 2018/09/28 12:00 a.m.25 views

CVE-2018-17377

SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter...

10AI score0.03213EPSS
SaveExploits5References2
CNVD
CNVD
added 2018/07/05 12:00 a.m.13 views

Google Android System Information Disclosure Vulnerability (CNVD-2018-16197)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Google Android versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. An attacker can exploit this...

7.5CVSS8.7AI score0.00281EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/08 12:00 a.m.9 views

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-10683)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm Libgralloc component, which can be exploited by an attacker to elevate privileges...

7.8CVSS7.2AI score0.0017EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/08 12:00 a.m.10 views

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-10684)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm GPU component, which can be exploited by attackers to elevate privileges...

9.3CVSS7.2AI score0.00388EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/18 12:00 a.m.7 views

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2018-08437)

Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. An unspecified vulnerability exists in the Core component of Oracle VM VirtualBox. An attacker could explo...

3.8CVSS6.7AI score0.00428EPSS
SaveExploits0References1
OSV
OSV
added 2018/01/18 2:29 a.m.8 views

UBUNTU-CVE-2018-2685

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBo...

8.6CVSS7.2AI score0.00531EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/11/14 12:00 a.m.11 views

The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure

The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

9.8CVSS7.7AI score0.02602EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/08/10 12:00 a.m.6 views

The vulnerability of the Inffast component of the zlib library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Inffast component Inffast.c in the zlib library arises due to errors in number processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information by performing operations with...

7.5CVSS6.8AI score0.0755EPSS
SaveExploits0References13Affected Software4
Rows per page
Query Builder