Lucene search
+L

176 matches found

OSV
OSV
added 2017/06/22 6:29 p.m.8 views

CVE-2017-1326

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...

4.3CVSS5.8AI score0.00796EPSS
SaveExploits0References3
CNVD
CNVD
added 2017/05/11 12:00 a.m.24 views

Oracle MySQL Cluster Denial of Service Vulnerability

Oracle MySQL is an open source relational database management system from Oracle, of which Oracle MySQL Cluster is a highly practical and redundant version for distributed computing environments. A denial of service vulnerability exists in the Cluster:DD subcomponent of the MySQL Cluster componen...

5.5CVSS6.2AI score0.01404EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/04/27 12:00 a.m.9 views

Oracle MySQL Server Unauthorized Operation Vulnerability (CNVD-2017-06386)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: Security: Privileges subcomponent of the MySQL Server component in Oracle MySQL, version 5.7.17 a...

4.3CVSS7.8AI score0.0154EPSS
SaveExploits0References1
OSV
OSV
added 2017/04/24 7:59 p.m.10 views

CVE-2017-3569

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Business Events. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability allows low...

5.4CVSS5.8AI score0.00783EPSS
SaveExploits0References2
OSV
OSV
added 2017/04/24 7:59 p.m.7 views

CVE-2017-3541

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Server. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

8.2CVSS5.8AI score0.01954EPSS
SaveExploits0References3
OSV
OSV
added 2017/04/24 7:59 p.m.7 views

CVE-2017-3507

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...

7.3CVSS5.8AI score0.01665EPSS
SaveExploits0References3
OSV
OSV
added 2017/04/24 7:59 p.m.7 views

CVE-2017-3451

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Web. Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP ...

5.4CVSS5.8AI score0.00727EPSS
SaveExploits0References2
CNVD
CNVD
added 2017/02/22 12:00 a.m.9 views

Denial of Service Vulnerability in Multiple Lenovo Products

Lenovo Flex System x240 M5 and others are servers from the Chinese company Lenovo. A denial of service vulnerability exists in multiple Lenovo products. An attacker could cause a denial of service by updating the data structure to exploit the vulnerability...

6.8CVSS6.7AI score0.00921EPSS
SaveExploits0References1
OSV
OSV
added 2017/01/27 10:59 p.m.8 views

CVE-2017-3415

Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

8.2CVSS7.3AI score0.0156EPSS
SaveExploits0References3
OSV
OSV
added 2017/01/27 10:59 p.m.7 views

CVE-2017-3382

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

8.2CVSS7.3AI score0.01416EPSS
SaveExploits0References2
OSV
OSV
added 2017/01/27 10:59 p.m.5 views

CVE-2017-3339

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT...

8.2CVSS7.3AI score0.01248EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2017/01/27 10:59 p.m.5 views

CVE-2016-8304

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

5.4CVSS5.5AI score0.00843EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2017/01/20 12:00 a.m.9 views

Oracle Siebel Remote Vulnerability (CNVD-2017-00909)

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions , which includes sales management , marketing management , customer service systems , call centers and other modules.Siebel UI Framework is one of the framework components based on the...

3.5CVSS6.6AI score0.00984EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/10/20 12:00 a.m.8 views

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Outside In Technology Component (CNVD-2016-10062)

Oracle Outside In Technology is the United States Oracle Oracle company's set of software development kit SDK, which provides developers with a set of access, conversion and control of a variety of unstructured format files, a comprehensive solution. A remote security vulnerability exists in the...

8.6CVSS6.9AI score0.0224EPSS
SaveExploits0References1
OSV
OSV
added 2016/04/25 6:59 p.m.12 views

CVE-2016-2346

Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-the-middle attackers to execute arbitrary code by modifying fields in the client-server data stream...

8.1CVSS6.1AI score0.00944EPSS
SaveExploits1References2
Circl
Circl
added 2014/02/17 10:36 a.m.17 views

CVE-2012-5054

creationtimestamp| type| source ---|---|--- 2014-02-17 10:36:36+00:00| seen| MISP/5301e1b4-38e0-4603-a6ec-8454950d2109 2014-11-13 09:56:43+00:00| seen| MISP/54645d0f-5a88-4160-9416-5694950d210b 2020-10-09 17:35:18+00:00| seen| MISP/412b011d-08c3-4029-bf77-4ebac76d5e1b 2023-06-14 21:10:03+00:00|...

9.3CVSS7.2AI score0.21194EPSS
SaveExploits2References5
Rows per page
Query Builder