Lucene search
+L

9302 matches found

CNVD
CNVD
added 2017/10/18 12:0 a.m.7 views

Oracle Security Service Unauthorized Operation Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. Oracle Security Service is one of the security service components. A security vulnerability exists in th...

4.3CVSS4.8AI score0.01471EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/10/18 12:0 a.m.6 views

Unspecified Vulnerability in Oracle Hospitality Simphony (CNVD-2017-31507)

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. Oracle Hospitality Simphony is one of the cloud-based mobile food and beverage sales components of the solution, which provides human resource cos...

6.5CVSS6.9AI score0.01198EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/10/18 12:0 a.m.7 views

Unspecified Vulnerability in Oracle Hospitality Applications Hospitality Simphony Component

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. Oracle Hospitality Simphony is one of the cloud-based mobile food and beverage sales components of the solution, which provides human resource cos...

5.5CVSS5.7AI score0.00768EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/10/18 12:0 a.m.9 views

Unspecified Vulnerability in Oracle Mobile Field Service Component

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Oracle Mobile Field Service is one of the field servi...

8.2CVSS8.2AI score0.01642EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/10/11 12:0 a.m.15 views

The vulnerability of the HTTP/2 module of the Apache Traffic Server allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to improper handling of HTTP/2 requests. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

10CVSS7.8AI score0.02411EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/10/11 12:0 a.m.8 views

The vulnerability of the Microprogrammed Routing Software of the Axesstel MU553S router lies in the use of the default standard password for the administrator account, allowing attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogrammed routing software Axesstel MU553S is related to the default use of a standard password for the administrator account. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

10CVSS7.8AI score0.01405EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/10/11 12:0 a.m.16 views

The vulnerability of the HTTP/2 module of the Apache Traffic Server allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to improper handling of HTTP/2 requests. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

10CVSS7.8AI score0.02411EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2017/10/03 12:0 a.m.8 views

PT-2017-3586 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6 Description: A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can...

10CVSS7.4AI score0.84172EPSS
SaveExploits41References117
CNVD
CNVD
added 2017/09/22 12:0 a.m.6 views

Oracle Siebel Core CRM Remote Vulnerability

Oracle Siebel CRM is a set of customer relationship management solutions from Oracle USA. The solution includes modules for sales management, marketing management, customer service systems, call centers, etc. Siebel Core CRM component is one of the core components. A security vulnerability exists...

6.1CVSS6.7AI score0.0142EPSS
SaveExploits0References1
OSV
OSV
added 2017/09/18 9:40 a.m.19 views

SUSE-SU-2017:2518-1 Security update for php5

This update for php5 fixes on issues. This security issue was fixed: - CVE-2017-12933: The finishnesteddata function in ext/standard/varunserializer.re was prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue could have had an unspecified impact on the...

9.8CVSS9.6AI score0.0694EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/13 12:0 a.m.12 views

A vulnerability exists in the ext/standard/var_unserializer.re PHP hypertext processor, which allows an attacker to potentially compromise the integrity of data.

The vulnerability in ext/standard/varunserializer.re of the PHP hypertext processor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to potentially compromise the integrity of PHP data...

7.5CVSS7.7AI score0.0742EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/09/13 12:0 a.m.9 views

The vulnerability of the `finish_nested_data` function in the PHP interpreter allows a attacker to potentially compromise the integrity of data.

The vulnerability of the finishnesteddata function in the PHP interpreter’s ext/standard/varunserializer.re module arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to potentially compromise the integrity of PHP dat...

7.5CVSS7.2AI score0.0694EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2017/09/08 12:0 a.m.6 views

Cisco Emergency Responder SQL Injection Vulnerability

Cisco Emergency Responder ER is the United States Cisco Cisco a set of IP communications systems in the emergency call software. The software provides real-time location tracking database and caller location and other features. A SQL injection vulnerability exists in the SQL database interface in...

5.5CVSS6.1AI score0.00968EPSS
SaveExploits0References1
Prion
Prion
added 2017/09/07 9:29 p.m.20 views

Sql injection

A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker...

5.5CVSS6AI score0.00968EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.10 views

The vulnerability of the Android CAF-release operating system’s supervisor allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system’s supervisor is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.00877EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.16 views

The vulnerability of the Inter-RAT process in the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Inter-RAT process in the Android CAF-release operating system is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.3AI score0.01056EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.9 views

The vulnerability of the Android CAF-release operating system, related to access control deficiencies, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by sending UE identifier IMEI or IMEISV to the...

10CVSS7.7AI score0.0094EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.9 views

The vulnerability of the Android operating system in the CAF repository exists due to errors in processing QMI messages, allowing a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability of the Android operating system from the CAF repository is related to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of QMI messages during processing...

10CVSS8.3AI score0.00904EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.11 views

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.14 views

The vulnerability of the procedure related to the remote UIM client, the Android CAF-release operating system, allows a perpetrator to compromise the privacy, integrity, and accessibility of protected information.

The vulnerability of the process related to the remote UIM client in Android CAF-release builds is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.3AI score0.01056EPSS
SaveExploits0References2
Rows per page
Query Builder