Lucene search
+L

1665 matches found

BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•21 views

Primavera Portfolio Management Unauthorized Access

The vulnerability of the Web Access component of Primavera Portfolio Management software relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data using the HTTP protocol...

4.3CVSS6.4AI score0.00879EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/08 12:00 a.m.•17 views

GL Accounts Component Access Modification

The vulnerability of the GL Accounts component of the Oracle Trade Management business platform is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain read, modify, add, or delete access to data using the HTTP protocol...

8.5CVSS7.6AI score0.01105EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/08 12:00 a.m.•31 views

Enterprise Manager Base Platform Access Manipulation

The vulnerability of the Policy Framework component of the Enterprise Manager Base Platform is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain access to read, modify, add, or delete data...

8.8CVSS7.7AI score0.00557EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/07 12:00 a.m.•22 views

Oracle WebLogic Server Unauthorized Access

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data, or to cause service failures using...

6.5CVSS6.8AI score0.03618EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/07 12:00 a.m.•21 views

Expenses Component CurrencyOverride Unauthorized Access

The vulnerability of the Expenses component in the Oracle Project Costing calculation service’s CurrencyOverride feature is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to create, modify, o...

8.5CVSS7.6AI score0.01028EPSS
SaveExploits0References4Affected Software1
Microsoft Malware Protection
Microsoft Malware Protection
•added 2022/03/31 5:00 p.m.•31 views

3 strategies to launch an effective data governance plan

Aware of the potential risks of sensitive data if not managed properly, you’ve undertaken a data discovery process to learn where it’s all stored. You’ve classified this sensitive data—confidential information like credit card numbers and home addresses collected from customers, prospects,...

0.3AI score
SaveExploits0
CNVD
CNVD
•added 2022/03/29 12:00 a.m.•21 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-25198)

Oracle MySQL Server is a relational database from Oracle Corporation. An input validation error vulnerability exists in Oracle MySQL Server. A remote attacker could exploit the vulnerability to corrupt or delete data...

5.5CVSS5.9AI score0.01223EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/03/29 12:00 a.m.•19 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-25201)

Oracle MySQL Server is a relational database from Oracle Corporation. An input validation error vulnerability exists in MySQL Server due to an input validation error in the Server:Optimizer component in MySQL Server. A remote attacker could exploit this vulnerability to corrupt or delete data...

4.9CVSS6AI score0.01435EPSS
SaveExploits0References1
Mend
Mend
•added 2022/03/25 6:02 p.m.•8 views

CVE-2021-20290

An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a...

6.9CVSS0.00223EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/25 12:00 a.m.•11 views

CVE-2021-20290: Incorrect Authorization

An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a...

6.1CVSS6.5AI score0.00223EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•5 views

CVE-2022-21179: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in EC-CUBE plugin 'Mail Magazine Management Plugin' ver4.0.0 to 4.1.1 for EC-CUBE 4 series and ver1.0.0 to 1.0.4 for EC-CUBE 3 series allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted pag...

4.3CVSS5.6AI score0.00472EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/02/03 12:00 a.m.•38 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09249)

Oracle MySQL Server is a relational database from Oracle Corporation. An input validation error vulnerability exists in MySQL Server, which originates from an input validation error in the Server: Optimizer component in MySQL Server. An attacker can exploit the vulnerability to corrupt or delete...

5.5CVSS5.5AI score0.01669EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/03 12:00 a.m.•33 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09134)

Oracle MySQL Server is a relational database from Oracle Corporation. An input validation error vulnerability exists in MySQL Server, which originates from an input validation error in the Server: Optimizer component in MySQL Server. An attacker can exploit the vulnerability to corrupt or delete...

6.8CVSS5.3AI score0.01976EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/03 12:00 a.m.•31 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09136)

Oracle MySQL Server is a relational database from Oracle Corporation. An input validation error vulnerability exists in MySQL Server that originates from an input validation error in the Server: Optimizer component in MySQL Server. An attacker can exploit the vulnerability to corrupt or delete da...

6.3CVSS5.4AI score0.0169EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/03 12:00 a.m.•37 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09135)

Oracle MySQL Server is a relational database from Oracle Corporation. An input validation error vulnerability exists in MySQL Server that originates from an input validation error in the Server: Optimizer component in MySQL Server. An attacker can exploit this vulnerability to corrupt or delete...

4.9CVSS5.3AI score0.01932EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/03 12:00 a.m.•82 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09140)

Oracle MySQL Server is a relational database from Oracle Corporation. An input validation error vulnerability exists in MySQL Server, which originates from an input validation error in the Server: Optimizer component in MySQL Server. An attacker can exploit the vulnerability to corrupt or delete...

6.3CVSS5.8AI score0.02686EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/03 12:00 a.m.•84 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09142)

Oracle MySQL Server is a relational database from Oracle Corporation. An input validation error vulnerability exists in MySQL Server, which originates from an input validation error in the Server: Optimizer component in MySQL Server. An attacker can exploit the vulnerability to corrupt or delete...

6.3CVSS5.8AI score0.02686EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/03 12:00 a.m.•46 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09143)

Oracle MySQL Server is a relational database from Oracle Corporation. An input validation error vulnerability exists in MySQL Server that originates from incorrect input validation in the Server: Optimizer component in MySQL Server. An attacker can exploit the vulnerability to corrupt or delete...

5.5CVSS4.7AI score0.01478EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/03 12:00 a.m.•66 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09147)

Oracle MySQL Server is a relational database from Oracle Corporation. An input validation error vulnerability exists in MySQL Server, which originates from an input validation error in the Server: Optimizer component in MySQL Server. An attacker can exploit the vulnerability to corrupt or delete...

6.8CVSS5.3AI score0.02031EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/03 12:00 a.m.•30 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09144)

Oracle MySQL Server is a relational database from Oracle Corporation. An input validation error vulnerability exists in MySQL Server that originates from an input validation error in the Server: Optimizer component in MySQL Server. An attacker can exploit the vulnerability to corrupt or delete da...

4.3CVSS6.4AI score0.01456EPSS
SaveExploits0References1
Rows per page
Query Builder