Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:20 a.m.2 views

CVE-2021-2460

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...

5.4CVSS5.2AI score0.00185EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-16919

Malware in sbrugna...

5.4CVSS5.9AI score0.00185EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-1660

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.00145EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:45 p.m.4 views

CVE-2020-14899

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromis...

5.4CVSS5.7AI score0.00185EPSS
Exploits0
OSV
OSV
added 2025/02/05 12:15 a.m.0 views

CVE-2025-0413

Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the targe...

7.8CVSS6.2AI score
Exploits0References2
Cvelist
Cvelist
added 2025/02/04 11:9 p.m.8 views

CVE-2025-0413 Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability

Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the targe...

7.8CVSS0.00145EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/04 11:9 p.m.6 views

CVE-2025-0413 Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability

Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the targe...

7.8CVSS7.8AI score0.00145EPSS
Exploits0References2
CVE
CVE
added 2025/02/04 11:9 p.m.87 views

CVE-2025-0413

Parallels Desktop is affected by CVE-2025-0413 in the Technical Data Reporter component. The flaw lets a local attacker with low privileges abuse symbolic links to change file permissions, enabling privilege escalation to root and potentially arbitrary code execution. Exploitation requires local ...

7.8CVSS7.5AI score0.00145EPSS
Exploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2025/02/04 12:0 a.m.7 views

Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Technical...

7.8CVSS7.2AI score0.00145EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/02/04 12:0 a.m.1 views

PT-2025-3882 · Parallels · Parallels Desktop

Name of the Vulnerable Software and Affected Versions: Parallels Desktop affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target host...

7.8CVSS7.5AI score0.00145EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.1 views

Parallels Desktop 后置链接漏洞

Parallels Desktop is a suite of virtual machine software for the macOS platform from US-based Parallels, Inc. Parallels Desktop suffers from a backlink vulnerability that stems from an issue in the Technical Data Reporter component, whereby the service can be abused to change the permissions of...

7.8CVSS7.9AI score0.00145EPSS
Exploits0References1
OSV
OSV
added 2021/07/21 12:15 a.m.1 views

CVE-2021-2460

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...

5.4CVSS6.7AI score
Exploits0References1
NVD
NVD
added 2021/07/21 12:15 a.m.11 views

CVE-2021-2460

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...

5.4CVSS0.00185EPSS
Exploits0References1
Prion
Prion
added 2021/07/21 12:15 a.m.11 views

Design/Logic Flaw

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...

4.9CVSS5AI score0.00185EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2021/07/21 12:0 a.m.25 views

Oracle Database Server has an unspecified vulnerability (CNVD-2022-09809)

Oracle Database Server is a relational database management system from Oracle Corporation. A security vulnerability exists in the Oracle Application Express Data Reporter component of Oracle Database Server versions prior to 21.1.0.00.04, which could be exploited by an attacker to cause...

5.4CVSS2.8AI score0.00185EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2021/07/20 10:45 p.m.11 views

CVE-2021-2460

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...

5.4CVSS5.7AI score0.00185EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/07/20 10:45 p.m.14 views

CVE-2021-2460

Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. The supported version that is affected is Prior to 21.1.0.00.04. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...

5.4CVSS5.7AI score0.00185EPSS
Exploits0References1
CVE
CVE
added 2021/07/20 10:45 p.m.77 views

CVE-2021-2460

CVE-2021-2460 affects Oracle Database Server's Oracle Application Express Data Reporter component, with versions prior to 21.1.0.00.04 affected. The vulnerability allows a low-privileged attacker with a valid user account and network access over HTTP to compromise Data Reporter, requiring user in...

5.4CVSS5AI score0.00185EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/07/20 12:0 a.m.3 views

Oracle Database Server 输入验证错误漏洞

Oracle Database Server is a relational database management system from Oracle Corporation. A security vulnerability exists in the Oracle Application Express Data Reporter component of Oracle Database Server versions prior to 21.1.0.00.04, which could be exploited by an attacker to cause...

5.4CVSS8.2AI score0.00185EPSS
Exploits0References4
CNVD
CNVD
added 2020/10/22 12:0 a.m.1 views

Oracle Application Express Data Reporter component privilege acquisition vulnerability

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A privilege acquisition vulnerability exists in Oracle Application Express Data Reporte...

5.4CVSS9.2AI score0.00185EPSS
Exploits0References1
Rows per page
Query Builder